Information Security Officer 3 – Security Architect, Application and Product Security

This is a fully remote position, open to applicants in Canada.

📋 Description

• Develop, uphold, advocate for, and ensure adherence to security architecture, DevSecOps frameworks, and policy instruments.

• Offer subject matter expertise in security architecture across secure application development, as well as business, data, application, and technology architecture.

• Consult, assess, and deliver digital service products throughout the solution development life cycle to ensure compliance with cybersecurity policies.

• Formulate options and provide recommendations.

• Conduct security reviews and offer guidance on secure coding, secrets management, on-premises solutions, AWS, Azure, GCP, and third-party hosting solutions.

• Generate both verbal and written security reports.

• Advise business and technical stakeholders, including senior executives, on security matters.

• Engage in projects as an information security subject matter expert, focusing on security architecture and DevSecOps security capabilities.

• Identify information security requirements and create organization-wide strategies and solutions.

• Facilitate or execute the identification, assessment, and treatment of information and technology security threats and risks.

• Document risks and treatment plans in the Government of Alberta Information Technology Security Risk Register.

• Communicate cyber threat information to relevant stakeholders.

• Conduct research on cyber threats or cybersecurity controls.

• Assist with cybersecurity incident response as needed.

• Lead security initiatives, projects, or teams to promote effective information security outcomes.

• Utilize AI tools to automate insights, personalize stakeholder engagement, create materials, and develop and track KPIs.

• Participate in a written practical exercise if necessary.

• Be part of the on-call rotation and work overtime as required based on project demands.

⛳️ Requirements

• A university degree in Computer Science, Information Technology, or a related discipline.

• At least 4 years of relevant experience in secure solution delivery life cycle.

• Experience in secure application development.

• Familiarity with securing continuous integration and continuous deployment (CI/CD).

• Experience with DevSecOps, testing, and security architecture.

• Alternatively, a related two-year diploma from a recognized post-secondary institution along with a minimum of 6 years of relevant experience.

• Alternatively, a related one-year certificate from a recognized post-secondary institution with at least 7 years of relevant experience.

• Expected to hold or be working toward a security certification such as CISSP, CISM, CISA, CEH, GPEN, or equivalent.

• Experience in solution architecture.

• Background in enterprise architecture or relevant certification.

• Familiarity with AI-powered cybersecurity tools and techniques.

• Ability to lead and maintain composure during crises.

• Superior verbal and written communication skills suitable for executive briefings and technical discussions.

• Capacity to collaborate effectively and secure consensus among multiple stakeholders.

• Curiosity to investigate root causes and identify options and recommendations.

• Strong analytical and problem-solving skills in complex environments.

• Proven proficiency in using AI to tackle complex issues and automate the analysis of large datasets.

• Must reside in Alberta for remote work.

• Final candidates will be subject to enhanced security screening.

• Education and work experience dates must be included in the resume.

• Candidates with post-secondary education from outside Canada are encouraged to obtain a Canadian credential evaluation.

🏝️ Benefits

• Remote work opportunities throughout Alberta.

• Enrollment in the Public Service Pension Plan (PSPP).

• Benefits associated with Alberta Public Service.

• Opportunities for professional learning and development.

• A positive workplace culture that promotes work-life balance.

• Permanent full-time employment status.

• Possibility of additional temporary full-time positions.

• Potential for on-call rotation and overtime opportunities.