AVP, Security Domain – Enterprise Architecture

Sun Life

. Own the enterprise security architecture strategy and target state across identity, cloud, infrastructure, networks, endpoints, applications, data, and security platforms .

Posted 11/11/2026full-timeToronto • CanadaLead💰 CA$165,000 - CA$235,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity architecture, including identity and access management, cloud security, and the NIST Cybersecurity Framework. Proven ability to lead security architecture teams, develop multi-year capability roadmaps, and influence executive stakeholders.

Highest-signal resume keywords

Cybersecurity ArchitectureIdentity And Access ManagementNIST Cybersecurity FrameworkCloud SecurityTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitectureThreat ModellingSecure DevelopmentCryptographyData ProtectionRisk ManagementArchitecture StandardsSecurity TransformationAutomationZero Trust

Soft Skills

CommunicationNegotiationStakeholder Management

Tools & Technologies

AWSAzureAlibaba Cloud

Certifications & Qualifications

CISSPCISMSABSATOGAF

Industry Keywords

Financial ServicesRegulated IndustryHybrid CloudMulti-Cloud

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Own the enterprise security architecture strategy and target state across identity, cloud, infrastructure, networks, endpoints, applications, data, and security platforms
Establish multi-year security capability roadmaps aligned with business priorities, enterprise architecture, cybersecurity strategy, and organizational risk appetite
Translate capability assessments, threat trends, and the NIST Cybersecurity Framework into prioritized architecture improvements
Lead and develop the Security Architecture team, including performance, coaching, succession planning, and skills development
Define the function’s operating model, engagement processes, and service expectations
Prioritize demand and allocate capacity across strategic planning, project assurance, governance, and emerging technology work
Manage the function’s operating plan, budget, and resources; build business cases for additional capacity or specialist support
Establish security reference architectures, standards, reusable patterns, and guardrails
Serve as senior security design authority for significant initiatives within enterprise architecture governance
Represent Security Architecture on enterprise technology review boards and oversee design assurance
Oversee architectural exceptions, compensating controls, remediation plans, and escalation of material residual risks
Provide security architecture oversight for major business and technology initiatives from planning through implementation
Embed threat modelling, secure design reviews, and reusable security patterns into delivery practices
Lead security transformation programs covering identity modernization, cloud security, network segmentation, application security, data protection, and cyber recovery
Direct the evolution, integration, consolidation, and retirement of security tools, services, and capabilities
Shape investment priorities and present business cases addressing risk reduction, control coverage, feasibility, interoperability, operational capacity, and total cost of ownership
Evaluate emerging security technologies, vendors, and service models; sponsor proofs of concept
Define security architecture requirements for AI platforms, generative AI, and autonomous agents
Identify opportunities to use automation and AI within security capabilities
Identify systemic security architecture weaknesses and drive mitigation roadmaps
Translate security, privacy, regulatory, and data residency requirements into architecture requirements
Integrate resilience, ransomware containment, recovery, logging, and monitoring requirements into security designs
Use incidents, testing, audits, and control assessments to improve architectures, patterns, and roadmaps
Advise the Global Chief Enterprise Architect, CISO, CTO, CIO, and business technology leaders
Translate complex architecture choices into business implications, investment options, dependencies, and risk recommendations
Build alignment across global business units and technology functions
Report on architecture coverage, adoption, roadmap progress, and outcomes

Requirements

What you’ll need

University degree or college diploma in cybersecurity, computer science, information technology, or a related discipline, or an equivalent combination of education and relevant experience
15+ years of progressive experience in cybersecurity architecture, engineering, or related technology leadership roles
Experience leading and developing architecture or security teams, managing priorities and resources, and delivering outcomes in a complex, matrixed organization
Experience influencing VP and SVP stakeholders and presenting architecture strategies, investment recommendations, and risk decisions at executive forums
Strong knowledge of identity and access management, cloud, infrastructure, network, endpoint, application, API, and data security, including cryptography and secrets management
Ability to establish enterprise architecture standards, reference patterns, governance processes, and multi-year security capability roadmaps
Understanding of Zero Trust, defense in depth, threat modelling, secure development, and the NIST Cybersecurity Framework
Experience modernizing security platforms and evaluating vendors or third-party services for technical feasibility, integration, control effectiveness, and total cost of ownership
Excellent communication, negotiation, and stakeholder management skills
For Quebec positions, bilingual French and English proficiency, oral and written, is required
Preferred: experience in financial services or another regulated industry
Preferred: experience with hybrid and multi-cloud environments, including AWS, Azure, or Alibaba Cloud
Preferred: experience defining security architectures for AI, autonomous agents, automation, or emerging technologies
Preferred: experience with major security transformations, technology rationalization, or mergers and acquisitions integration
Preferred: relevant certifications such as CISSP, CISM, SABSA, TOGAF, or cloud security and architecture certifications

Benefits

Comp & perks

Continuous learning, development, and improvement
Hybrid work arrangement with choice to work from home or office based on business and Client needs
Competitive salary and bonus program
Flexible group insurance program starting on the first day of work
Incentive plans for eligible employees
Accommodation support for persons with disabilities
Diversity and inclusion-focused workplace