לוח משרות דרושים, לחיפוש זה נמצאו 34,165 משרות

Requirements:
A Foundation in Engineering Leadership: 10+ years of technology experience, including a significant background in software engineering, solutions architecture, and DevSecOps/DevOps/SRE, with a deep understanding of how modern applications are designed, built, and deployed.
People Management Experience: 3+ years directly managing or formally leading technical teams, ideally including senior architects or principal-level engineers, with a track record of hiring, developing, and retaining strong technical talent.
Financial Services / Multi-Entity Experience: Prior experience providing security advisory in regulated environments, multi-entity corporate structures, or financial technology platforms is preferred.
Deep Application Security Expertise: 5+ years in application, product, or cloud security architecture, with the ability to evaluate and guide architectural mitigations for OWASP Top 10 and design-level vulnerabilities in a microservices architecture.
Cloud Security Architecture: Demonstrated experience defining architecture patterns and conducting security assessments in cloud-native platforms, specifically Google Cloud Platform (GCP); familiarity with AWS or Azure is beneficial.
Expertise in Securing Distributed Systems: Strong understanding of security design patterns for microservices architectures, containerized environments (Kubernetes), and event-driven systems, including API gateways, service mesh concepts, secrets management, and network policies.
Pragmatic Threat Modeling Expertise: Proven background leading and overseeing architectural threat modeling exercises (e.g., STRIDE or similar frameworks) across cloud-native and distributed environments, and translating theoretical threats into actionable architecture guardrails and engineering requirements.
Emerging Technologies: Familiarity with secure architecture considerations for Generative AI integration, agentic workflows, and modern data platform architectures.
Excellent Communication and Influence: Exceptional ability to articulate complex technical risks and solutions to both senior engineers and executive stakeholders to drive consensus and prioritization.
Budget and Vendor Management: Experience managing team budgets and evaluating security tooling or vendor relationships is a plus.
Relevant security, application security, and security architecture certifications (e.g., CISSP, CSSLP, GIAC) are beneficial.

Requirements:
Provide technical leadership on all Identity Security aspects, including but not exhaustive to Access, Authentication and Authorization (AAA), Privileged Access Management (PAM), Identity Governance & Administration (IGA), Single Sign-On, Authentication Escalation (e.g. phishing-resistant MFA), Risk-based Access, FIDO2, Windows Hello, Platform Credential for macOS, Touch ID for FIDO2, Intune MDM, personal password managers, FIDO2 security keys, biometrics, and passkeys.
Collaborate with Business stakeholders in both project and operations to translate Business needs to Identity requirements, tailored to the Organizations needs and risk tolerance.
Design and document solutions meeting the Enterprise use cases and advise on industry and vendor best practices.
Liaise with Enterprise Architecture, Infrastructure Architects and Security Architects to build a coherent and integrated environment, based on strong foundations and standards.
Implement and operationalize all Identity Security controls.
Streamline and improve Identity Security Operations, especially by maximizing the usage of automation for consistent and scalable outputs.
Maintain a high quality standard in Operations.
Train Organizational Stakeholders/platform administrators on the proper usage of the Identity Security solutions (e.g. PAM, IGA).
Oversee the Access Audit process, design check-and-balance controls to ensure data quality, integrity and timeliness.
Define and maintain the library Identity Security related KPIs and KRIs which are meaningful to the Organization, collaborate with SMEs and the BI team to automate their generation and oversee their periodical generation.
Security Remediation: Significant engagement in identifying and closing high-severity security findings and supporting the architectural setup of Questbank during the first year of tenure.
Entity Governance: Accountability for managing and maintaining identity security controls and compliance postures across the distinct QFG regulated entities.

Requirements:
Professional Experience & Education
Sector Expertise: Minimum of 4+ years of experience in IT and Cyber Risk, Audit, and/or GRC specifically within a regulated financial institution.
Academic Foundation: Formally educated in Business, Computer Science, Information Systems, Engineering, or equivalent professional experience.
Regulatory & Framework Mastery
Framework Proficiency: Deep understanding of a broad set of risk methodologies, frameworks, and practices-including NIST CSF, COBIT, ISO 2700x standards, CIS, COSO, ITIL, and PCI-DSS.
Regulatory Knowledge: Comprehensive understanding of the Canadian regulatory environment (OSFI and CIRO) and global assurance frameworks (SOC 1/2).
Governance Development: Proven experience in developing, updating, and reviewing high-level Governance documents, including policies, standards, and procedures.
Control Design & Risk Methodology
Lifecycle Oversight: Extensive experience performing complex risk assessments and designing robust controls.
AI and Automation: Proficiency in advanced Prompt Engineering for Generative AI models to accelerate GRC artifacts (e.g., summarizing SOC reports).
Technical Literacy: Strong knowledge of technology platforms, including Operating Systems and Databases.