Job ID: 87462Location: Toronto, OntarioWork Location: Metro Hall, 55 John Street, Toronto Job Category: Information & TechnologyDivision & Section: Toronto Cyber Security, Cyber Resilience Job Type & Duration: Full-time, PermanentSalary: $123,833.00 – $170,184.00Shift Information: Monday to Friday, 35 hours per weekAffiliation: Non-UnionNumber of Positions Open: 1Posting Period: April 16, 2026 – April 30, 2026 Overview The Senior Specialist, Cyber Architecture will support the Chief Information Security Officer (CISO) in executing the City’s cyber vision, strategy, and goals. The primary focus is advising and delivering technical expertise related to cloud security initiatives across the City’s divisions, agencies, and corporations. This role involves developing, implementing, and continuously improving cloud security measures, engaging with teams to enhance the cyber security posture of cloud environments. The Security Architect provides senior-level technical leadership and subject matter expertise across cyber architecture domains, ensuring security principles are embedded into application design, cloud services, infrastructure platforms, and data ecosystems. This role partners closely with enterprise architecture, engineering, and delivery teams to ensure secure‑by‑design outcomes, regulatory compliance, and resilience against emerging threats. What you will be doing: Assist with the secure design and architecture of enterprise applications, cloud platforms, and infrastructure services, ensuring the protection of sensitive data and critical systems. Define and maintain security architecture patterns, reference architectures, and blueprints for IaaS, PaaS, SaaS, and on‑premise environments. Conduct architecture reviews, threat modeling, and security risk assessments for enterprise applications, infrastructure platforms, and cloud‑hosted solutions. Provide leadership and direction in the research, design, planning, and execution of cloud security initiatives to address emerging threats and trends related to generative/Agentic AI, data usage, access governance, monitoring, and misuse, and advising stakeholders on secure and responsible adoption of AI technologies in cloud environments. Provide subject‑matter expertise in PCI‑DSS compliance within cloud environments, supporting PCI‑DSS scoping, control validation, evidence review, and remediation guidance for cloud‑hosted payment systems and integrated third‑party services. Contribute to the development, maintenance, and enforcement of security policies, standards, and guidelines, aligned with industry frameworks and regulatory requirements.



Partner with enterprise architects, infrastructure teams, application teams, and cloud engineers to embed security into planning, design, and delivery lifecycles. Provide mentorship, guidance, and security design expertise to technical teams, promoting best practices across application and infrastructure domains. Stay current with evolving threats, technologies, and architectural patterns to proactively recommend improvements to the organization’s security posture. Contribute to continuous improvement of the enterprise security architecture and long‑term cybersecurity roadmap. What you must have: Post‑secondary degree in Business or Technology or a related discipline. Extensive experience in security architecture across enterprise applications, infrastructure, and cloud environments. Demonstrated experience performing architecture reviews, threat modeling, and security assessments in complex environments. Strong understanding of cloud security frameworks, industry standards, and regulatory requirements (NIST, CSA CCM, CIS, ISO 27001, PCI‑DSS etc.). Hands‑on implementation experience with cloud data platforms. In‑depth knowledge of cloud platforms, security solutions, and services (AWS, Azure, Google Cloud, etc.). Solid understanding of Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), Cloud Native Application Protection Platform (CNAPP) and Cloud Workload Protection Platform (CWPP) tools; knowledge of cloud security frameworks, standards and best practices; and working with cloud IAM and IaaS, PaaS and SaaS native security capabilities. Proven ability to operate effectively in large, complex, enterprise environments. Recognized for strategic thinking, innovation, and systematic problem‑solving. Strong ability to influence, guide, and support teams through architectural and security changes. Excellent communication skills, capable of translating complex security concepts for technical and non‑technical audiences. Preferred Certifications (at least two in the list): CISSP, CCSP, CCSK, SABSA, TOGAF, ISO 27001 LA, GICSP, or CRISC. Skills Ability to work in transformative programs. Ability to lead efficient communication between all project stakeholders,



including internal teams and clients. Ability to achieve business objectives through influencing and effectively working with key stakeholders. Excellent written & verbal communication skills (comfortable & confident communicating at all levels including business partners, leadership and vendors). Excellent problem‑solving skills with capability to identify solutions to unusual and complex problems. Keen attention to detail and strong organizational skills. Highly organized, proactive, self‑motivated team player who takes initiative and is able to work independently. Ability to work in a quick‑paced environment managing multiple priorities with proven time management skills. Strong analytical skills and ability to prioritize and multitask. Ability to prioritize and effectively manage competing priorities and projects. Ability to manage multiple initiatives while adhering to strict deadlines. Able to work extremely well under pressure while maintaining a high level of professionalism. Self‑motivated person with desire to go above and beyond tasks. Transferable skills, like communication and decision‑making, are equally important. Being able to think on your feet and show good judgment are especially valuable in this field. Security pros should always be ready to react to cyber‑related incidents quickly. Other Information A Qualified List of candidates will be established for the Senior Specialist Cloud Security Assessment position in the Toronto Cyber Security and will be in effect for 24 months from the date the list is created. Qualified candidates on the list may be considered when filling future permanent and/or temporary vacancies in this position. Applicants are required to demonstrate in their resume that their qualifications match those specified in the job posting. A normal work week is 35 hours, however, unforeseen situations may require extended hours of work with little or no prior notice. In case of a cyber incident or breach, rotation shift, continuous extended hours may be required with little or no prior notice. The successful candidate will be subject to a police check, background check, psychological assessment and/or any other checks on a regular basis as the Toronto Cyber Security handles highly sensitive and confidential information. Equity, Diversity and Inclusion The City is an equal opportunity employer, dedicated to creating a workplace culture of inclusiveness that reflects the diverse residents that we serve. Learn more about the City’s commitment to employment equity. #J-18808-Ljbffr

📌 Senior Specialist, Cyber Architecture - C$123,833 - C$170,184 A Year (Toronto)
🏢 City of Toronto
📍 Toronto