Information Security Architect (T & I) (Telework/Hybrid)

Position Title:

Status of Employment:

Position Language Requirement:

Language Skills:

Work at CBC/Radio-Canada

At CBC/Radio-Canada, we create content that informs, entertains and connects Canadians on multiple platforms. Our successes and accomplishments are driven by embodying and upholding values, which include creativity, integrity, inclusiveness and relevance. 
 
Do you think you have the ability and drive to keep up with this exciting, ever-changing industry? Whether it be in front of the camera, on air, online or behind the scenes, you would be joining a team that thrives on making connections and telling stories that are important to Canadians.

Unposting Date:

Behind the scenes, but ahead of the curve: help us develop the next-generation public service media organization.

Technology & Infrastructure (T&I) is the backbone and the future-forward arm of CBC/Radio-Canada. Our purpose is to constantly innovate to evolve and maintain the Corporation’s technology and infrastructure. We are the people that make stuff work. We make connections between media content, systems, people and places. We are the space in between.

A place with purpose. CBC/Radio-Canada has always been a highly regarded pioneer of media technology — not just in Canada but around the world. Today, we are transforming ourselves into a modern and agile public service media organization. Technology is the driving force, and we are the team making it happen.

This is a hybrid role with a mix of in-office and remote work. Work arrangements will be discussed with the hiring managers per departmental guidelines.

Your Role

Serving as the leading cybersecurity authority for CBC/Radio-Canada, you will shape the Corporation’s strategic technology road map by aligning security imperatives with business objectives. In this role, you will elevate security from a traditional support function to a core pillar of enterprise architecture that drives tangible business value.

Vision and Cross-Functional Leadership

• Defining the Vision: Lead, define and promote the integration of a unified security architecture vision within Enterprise Architecture (EA), ensuring technical alignment and consistency across all software, platforms and infrastructure.
• Stakeholder Engagement: Establish clear direction on security roles, responsibilities and priorities, collaborating with key stakeholders to ensure technology investments are secure by design.
• Strategic Alignment: Partner with Architecture and Strategic Development leadership to shift security architecture from an IT-centric model to one driven by business needs and value.

Governance, Policies and Standards (Expert Technical Support)

• Collaborative Development: Work closely with the policy and compliance lead, providing the technical expertise required to define, update and maintain information security policies, guidelines and standards (e.g., ISO 27001, NIST).
• Reference Architecture: Design standard reference models and technical guardrails based on zero-trust and security-by-design principles, ensuring established standards are technologically feasible and robust.
• Technical Standardization: Establish secure configuration standards and minimum technical requirements to support the Corporation’s overall compliance framework.

Collaboration and Architectural Alignment

• Architectural Synergy: Work closely with enterprise and solution architects to ensure security requirements are thoroughly understood, integrated and respected across all levels of the organization.
• Strategic Alignment: Ensure that technological solutions proposed by business units align with the Corporation’s unified, secure technology vision.

Strategic Evaluation and Project Compliance

• Audit and Validation: Conduct rigorous security assessments for large-scale projects, critical applications and new data centre infrastructure.
• Standards Assurance: Ensure all technology initiatives strictly adhere to the established compliance framework throughout their design and implementation phases.
• Adjudication: Evaluate and recommend the approval or remediation of solutions based on their alignment with organizational security requirements and technology goals.

Advisory, Influence and Industry Engagement

• Strategic Partnership: Translate complex cyberthreats into clear business risks for senior leadership to drive informed decision-making and justify security budgets.
• Navigating Organizational Dynamics: Build consensus on major security initiatives and effectively overcome roadblocks across diverse corporate teams.
• Industry Representation: Represent CBC/Radio-Canada on international committees (such as NABA or EBU) to influence global media technology standards.

Innovation and Mentorship

• Research and Feasibility: Develop business cases for adopting emerging and disruptive technologies (e.g., AI, automation) and perform comprehensive cost-benefit analyses.
• Talent Development: Mentor architects and analysts within the team, guiding them through complex technical challenges and supporting their professional growth.

What You Bring

• University degree in the field of computer science, IT or information security.
• Minimum five years’ experience in a security architecture role.
• 10 or more years’ overall experience in the cybersecurity field.
• Extensive knowledge of security technology and risk assessment methodologies, policies and processes.
• Proven ability to develop a dashboard and KPIs for information security reporting.
• Exceptional written, verbal and interpersonal communication skills, with a proven ability to translate complex technical concepts for non-technical audiences.
• Ability to work independently and multitask effectively.
• Excellent analytical, evaluative and problem-solving abilities.
• Strong knowledge of and experience with IP networks and security infrastructure (firewalls, routers, switches, access control, etc.).
• Knowledge of the following:
  • Web infrastructure and application security (OWASP).
  • Network security tools (IDS/IPS, firewalls, etc.).
  • Encryption technologies and concepts.
  • Database architecture concepts.
  • Physical security controls.
  • Disaster recovery concepts.
  • Multifactor authentication concepts.
  • Single sign-on concepts.
  • Zero-trust concepts.
  • Security-by-design concepts.
• Experience implementing or assessing security in a cloud-hosted environment.
• Experience with security standards such as ISO 27001/27002/27005, NIST, COBIT and ITIL.
• Security-related technical certifications (CISSP, CRISC, CBCP, CISA, CISM or equivalent) a strong asset.
• Bilingualism (English and French) essential.

Candidates may be subject to skills and knowledge testing.
 

We thank all applicants for their interest, but only candidates selected for an interview will be contacted.

As part of our recruitment process, candidates who advance to the next

step will be asked to complete a background check. This includes:  

• A mandatory Criminal record check. 

• Other background checks may be conducted based on the operational requirements of the position.

CBC/Radio-Canada is committed to being a leader in reflecting our country’s diversity. That’s because we can only create and tell the stories that connect Canadians, by having a workforce that mirrors the ever-changing makeup of our country. That’s why we, as an employer, value equal opportunity and nurture an inclusive workplace where our individual differences are not only recognized and valued, but also extend to and pervade all the services we provide as Canada’s public broadcaster. For more information, visit the Diversity and Inclusion section of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by sending an e-mail to [email protected].
 
You are invited to consult and familiarize yourself with our Code of Conduct, which can be found on our corporate website. All employees must adhere to the Code as a condition of employment. We also invite you to take a look at our policy on conflicts of interest. In the event that you become an employee, it will be important to inform us, as quickly as possible, of any situation that, because of your hiring, constitutes or could appear to constitute a conflict of interest.

Primary Location:

Number of Openings:

Work Schedule: