Director, Security Architecture

Sun Life

. Represent the Security Architecture team across the enterprise architecture and technology community .

Posted 11/3/2026full-timeToronto • CanadaLead💰 CA$135,000 - CA$195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in information security architecture, engineering, and design, with a focus on multi-cloud security and AI governance. Proven ability to lead security initiatives, manage complex organizations, and drive strategic evolution of security capabilities.

Highest-signal resume keywords

Information Security ArchitectureMulti-Cloud Security ArchitectureAPI SecurityAI Security Posture ManagementCISM/CISSP/CISA Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture DesignCloud SecurityEndpoint SecurityWeb FilteringEmail SecurityPerimeter ProtectionDatabase Activity MonitoringSAST/SCA/DASTCNAPP/CSPMEDR/XDR

Soft Skills

Expert Communication SkillsStrategic ThinkingNegotiationConsensus BuildingPeople Leadership

Tools & Technologies

SIEMSecrets ManagementPrivileged Access ManagementSSE/CASBSecurity Tooling

Certifications & Qualifications

CISMCISSPCISA

Industry Keywords

NIST FrameworkZero-Trust ApproachAI Governance FrameworksData Protection SecuritySecurity Best Practices

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Represent the Security Architecture team across the enterprise architecture and technology community
Shape how security is designed into enterprise systems, including AI systems reaching production
Prioritise strategic concepts and capability sets, align security to architecture processes and the NIST framework
Advance technology modernisation and defense-in-depth across multiple clouds and on-premises environments
Set direction for the security technology stack and make strategic decisions about its future
Partner with global domain architects to review enterprise architecture patterns and guardrails
Evaluate and recommend emerging technologies through proofs of concept and business cases
Represent security technology and capability strategy at senior executive forums and enterprise technology review boards
Provide architecture and design expertise on enterprise projects and security initiatives
Certify domains in line with architecture governance
Lead the strategic evolution of security capabilities using a zero-trust-first approach
Define security architecture for AI and agentic systems, related data and hosting platforms
Establish model and agent governance, AI security posture management, data-classification controls and protections against prompt injection and model misuse
Set a modernised approach to security tooling, services and capability sets
Drive multi-cloud consistency for controls, telemetry and posture management

Requirements

What you’ll need

Minimum 7–10 years in information security architecture, engineering and design
Proven ability to navigate complex organisations across the security, network, infrastructure and global architecture stack
Proven experience migrating and upgrading core security technologies, including API security, web filtering, cloud security, email security and endpoint security
Experience managing third-party security service providers in delivering security services
Strong knowledge of endpoint, cloud, infrastructure, perimeter and data protection security domains
Multi-cloud security architecture across at least two major providers
Working knowledge of CNAPP/CSPM, EDR/XDR, SIEM, secrets management, privileged access management, SSE/CASB, WAF, perimeter protection, database activity monitoring, SAST/SCA/DAST
Familiarity with AI and LLM threat models, AI governance frameworks, AI security posture management, model and agent identity, and AI data-security implications
Pragmatic understanding of security problems as a mix of technology and process
Expert written and verbal presentation and communication skills
People leadership experience preferred
Extensive knowledge of information security principles, best practices and industry standards
Self-starter, strategic thinker, negotiator and consensus builder
University degree/college diploma in related disciplines or equivalent co-op work experience
Professional designation in IT security such as CISM, CISSP or CISA preferred

Benefits

Comp & perks

Competitive salary and bonus program, based on market scale
A flexible group insurance program starting on your first day of work
20 vacation days per year
Share Ownership Program with employer matching contributions
A warm, supportive, and inclusive culture
Hybrid work flexibility from the office and virtually