Select how often (in days) to receive an alert: Create Alert

Oct 14, 2026

Dentons is designed to be different. Our Firm leads the way in a rapidly changing legal marketplace. We challenge the status quo and deliver consistent results as well as uncompromising quality and value to our clients. Our global presence is renowned as a firm with over 21,000 individuals in more than 200 offices serving clients across 80+ countries.

Dentons Canada is committed to its people and communities. We are consistently recognized as an employer of choice having received numerous awards including being selected as one of Canada’s Top 100 Employers (2026); Canada’s Top Employers for Young People (2026), and Canada’s Best Diversity Employers (2026).

This role is an opportunity for you to join Canada's Global Law Firm, a firm that offers opportunities to build your career while growing your skills and deepening your expertise.

ROLE

Dentons Canada LLP is currently recruiting for an Information Security Design Specialist who will serve as a senior technical security authority for the Canada region. The candidate will be responsible for ensuring security is designed into technology initiatives from the earliest stages, including cloud services, SaaS platforms, APIs, integrations, AI solutions, identity flows, and enterprise architecture. The role requires a consultative security leader who can translate business requirements into practical security requirements, risk decisions, secure design patterns, and compensating controls.

KEY RESPONSIBILITIES & ACCOUNTABILITIES

Security Architecture & Secure Design

- Conduct threat modelling and security design reviews for current and changing application features, APIs, integrations, SaaS platforms, cloud services,



and enterprise technologies.
- Partner with Infrastructure, Cloud, Identity, Application, and Business Technology teams to translate business requirements into practical security requirements and secure design decisions.
- Provide actionable secure design guidance across authentication, authorization, identity, API security, data protection, network security, cloud architecture, and third-party integrations.
- Develop, maintain, and promote security reference architectures, design patterns, technical standards, and reusable guidance for common enterprise technology scenarios.
- Assess proposed architectures and recommend practical risk treatments, compensating controls, and design improvements that balance security outcomes with delivery timelines.
- Provide architectural input into technology roadmaps, vendor selection, platform modernization, cloud adoption, and secure access initiatives.

Cloud, Identity, Data Protection & AI Security

- Provide security architecture guidance for Microsoft Azure, Microsoft 365, Entra ID, Defender, cloud workloads, secure networking, and enterprise collaboration platforms.
- Partner with Identity & Access Services to define identity security patterns, privileged access standards, authentication requirements, service principal controls, and non-human identity considerations.




- Provide guidance on data protection, classification, DLP, encryption, information protection, and client data handling requirements across enterprise platforms.
- Lead or support security reviews for AI-enabled solutions, Copilot, Foundry, agentic AI, data-driven platforms, and emerging technologies to ensure responsible and secure adoption.
- Define secure AI architecture patterns, including controls for data access, identity, logging, monitoring, prompt risk, third-party integrations, and governance.

Risk Assessment, Technology Governance & Vendor Architecture

- Drive technical risk assessments for application, infrastructure, SaaS, cloud, AI, and integration changes, prioritizing recommendations based on business impact, exploitability, and client trust.
- Evaluate vendor security architectures and solution designs to identify risks, dependencies, control gaps, and required contractual or operational safeguards.
- Translate incident learnings, threat intelligence, and recurring control gaps into scalable design patterns, detection opportunities, developer guidance, and prevention strategies.
- Participate in the Security Architecture Review Board and provide recommendations to support informed, documented risk decisions.
- Partner with Security Assurance & Risk to support client security assessments, vendor reviews, audit activities, and security control evidence where technical architecture input is required.

Security Engineering Enablement & Automation

- Build or guide automation that streamlines security design reviews, vulnerability triage, evidence collection, exception management, and repeatable security workflows.
- Pro

📌 Information Security Design Specialist (Ottawa)
🏢 Dentons Canada
📍 Ottawa