ENTERPRISE ARCHITECT - GOVERNANCE, RISK AND COMPLIANCE, FT

Posted Date: 10/23/2026

Closing Date: 11/12/2026

Functional Discipline: INFORMATION AND COMMUNICATION TECHNOLOGY

VACANCY DETAILS

VACANCY NUMBER: 44110PS REPOST

JOB TITLE: ENTERPRISE ARCHITECT - GOVERNANCE, RISK AND COMPLIANCE, FT

STATUS: FULL TIME

DEPARTMENT: INFORMATION AND COMMUNICATION TECHNOLOGY

LOCATION: NIAGARA HEALTH

HOURS OF WORK: 75 HOURS PER PAY PERIOD

POSTING DATE: 23 OCTOBER 2026

CLOSING DATE: 12 NOVEMBER 2026

UNION: NON UNION

WAGE RANGE: $55.320 PER HOUR

POSITION OBJECTIVE

As an integral member of Niagara Health's Cyber Security team, working under the direction of the Director of Cyber Security, the Enterprise Architect - Governance, Risk and Compliance (GRC) will serve as Niagara Health's enterprise architecture lead for cybersecurity governance, technology risk, compliance and assurance. This role will turn regulatory and cybersecurity needs into clear architecture guidance, practical standards, roadmaps, controls, and decision records. The incumbent will work closely with Niagara Health teams, consultants, contractors and vendors to make sure solutions are secure, compliant, resilient, easy to support and aligned with patient safety and business goals from design through implementation, commissioning and transition to operations.

KEY RESPONSIBILITIES

- Lead the development, implementation, and maintenance of enterprise security architecture, governance, risk, and compliance (GRC) frameworks, standards, roadmaps, and strategic plans
- Integrate cybersecurity, privacy, governance, risk, and compliance requirements into business, application, technology, cloud, medical device, and integration initiatives




- Provide expert guidance and recommendations to business leaders, project teams, vendors, and internal and external parties on technology risk, security controls, compliance obligations, and remediation strategies
- Lead cybersecurity, privacy, technology risk, third-party risk assessments, and Threat Risk Assessments (TRAs) for recent solutions, system changes, integrations, and vendor engagements
- Review and evaluate solution architectures, data flows, integrations, identity and access models, resiliency, recovery capabilities, and security controls to ensure alignment with organizational standards and risk tolerance
- Develop, maintain, and oversee risk registers, control matrices, architecture assessments, compliance mappings, security requirements, exceptions, and related governance documentation
- Assess the effectiveness of security and compliance controls, identify risks and gaps, recommend mitigation strategies, and track remediation activities through resolution or formal risk acceptance
- Support threat modelling, business impact analyses, security testing, vulnerability assessments, penetration testing, audits, and operational readiness reviews
- Evaluate third-party and supply chain risks, including cloud services, data handling practices, connected medical technologies, software dependencies, and contractual security requirements




- Ensure alignment with industry best practices and frameworks, including NIST, ISO 27001/27002, CIS Controls, and applicable healthcare, privacy, accessibility, and regulatory requirements
- Lead the development and ongoing management of cybersecurity policies, standards, procedures, baselines, and architecture patterns
- Establish compliance monitoring, reporting, assurance, and evidence management processes to support internal reviews, external audits, and continuous compliance efforts
- Monitor emerging threats, regulatory changes, and evolving technology trends, recommending enhancements to security controls, governance practices, and architecture strategies
- Support governance forums by presenting architecture decisions, risk assessments, compliance status, exceptions, and recommendations to project and executive leadership teams
- Collaborate with Cybersecurity, Digital/IT, Privacy, Risk, Legal, Procurement, Clinical Engineering, Facilities, and operational teams to ensure secure and compliant technology delivery
- Support major organizational initiatives through participation in design reviews, technical workshops, procurement activities, commissioning, operational readiness, and transition planning
- Define and support security, privacy, audit, incident response, data protection, and service continuity requirements for contracts, projects, and vendor engagements
- Mentor and support technical and project teams in secure-by-design, privacy-by-design, and risk-based decision-making practices
- Drive continuous improvement of GRC processes, reporting, metrics, tools, and governance practices to enhance organizational effectiveness

📌 0000044110 - ENTERPRISE ARCHITECT - GOVERNANCE, RISK AND COMPLIANCE, FT (Canada)
🏢 Niagara Health
📍 Canada