Security Architect, Vulnerability Management & Risk
About the opportunity
Our client is a Vancouver-headquartered enterprise software company at the intersection of banking and business software. They're one of Vancouver's fastest growing Saa S companies serving some of the largest banks in North America and Europe.
This is a newly created seat, and the company has reached the point where vulnerability management, technical risk reviews, and vendor security assessments need a dedicated owner. You will own that technical oversight end to end and support the security strategy and roadmap.
Who this is for
You've got enough real technical depth to hold your own with engineers: you understand how cloud environments get compromised, you've worked with vulnerability management and penetration testing, and you've reviewed real security architectures. You don't need to be the person running the scans or writing the exploits. You need to be the person who owns the program, decides what matters, and brings it to engineering, product, and GRC in language they can act on. If you've spent time in a security consulting or advisory practice on top of a technical foundation, this could be a good fit.
What you will do
Own technical oversight
Lead security and risk reviews for material technology, infrastructure, integration, product, and operational changes.
Run threat modeling, product risk assessments,



and third-party vendor security assessments.
Provide security-by-design guidance for current systems, internet-facing services, AI capabilities, shared platforms, and sensitive data integrations.
Define security principles, control expectations, and risk guardrails across cloud, Saa S, data flows, identity, privileged access, and production environments.
Own the vulnerability management and testing program
Own the vulnerability management strategy and governance process across applications, infrastructure, cloud services, and shared platforms.
Set risk-based severity, prioritization, remediation expectations, escalation paths, and exception handling.
Govern the penetration testing program and turn findings into clear remediation priorities.
Spot recurring vulnerability patterns and drive durable control improvements with measurable risk reduction.
Provide oversight of high-severity findings, external exposure, and emerging threats.
Advise across the business
Be the technical security voice for Engineering, Infrastructure, Product, GRC, and Legal, so teams get clear answers early.
Translate technical risk into business impact and recommendations leadership can act on.
Support strategy and governance
Help build and maintain the security strategy, priorities, and roadmap in line with business objectives, regulatory obligations, and

📌 Security architect (Vancouver)
🏢 Metrics Recruitment
📍 Vancouver