Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 15 hours ago

Lead, Security Architect

Payments Canada3 open roles

Where
Payments Canada, 800-350 Albert Street, Ottawa, Ontario, Canada
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead, Security ArchitectPayments Canada · Payments Canada, 800-350 Albert Street, Ottawa, Ontario, Canada

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Payments Canada's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Payments Canada postings stay open a median of 17 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 15 hours ago

Payments Canada median: 17 days open

The posting

| What we are looking for Reporting to the Manager, Security Architecture, the Lead, Security Architect is responsible for driving consistent security strategy and contributing to the technology vision through secure-by-design architectural governance. This role provides strategic technical leadership across diverse programs, with a primary focus on ensuring that mission-critical solutions are secure, resilient, and proactive. Operating as a broad security generalist, the Lead Security Architect brings deep expertise in threat modeling and solution security principles to guide teams, assess risk, and align architectural design with business objectives.

Operating as a senior technical contributor, the role collaborates closely with software engineering teams, Security Operations, delivery partners, and IT leadership to integrate robust security frameworks into modern application solutions.

Duties and Responsibilities Contacts and Communication

Establish and maintain strategic relationships across IT, engineering, and business units to gain buy-in for security architecture standards and principles. Communicate complex security recommendations, risk evaluations, and architectural trade-offs to senior leadership in clear, business-centric terms. Collaborate closely with delivery teams, developers, and technical specialists to provide practical security guidance on complex system issues. Champion security-first design patterns, promoting a culture of secure development across all divisions.

Leadership and Technical Guidance

Provide strategic security guidance to product teams and solution architects, setting a high standard for defensive system engineering. Lead threat modeling and knowledge-transfer sessions across the enterprise to embed security early in the development lifecycle. Act as a senior technical contributor, offering security governance, design reviews, and guidance to manage technical security debt. Mentor staff and foster continuous learning around emerging threats, vulnerabilities, and secure design practices.

Security Architecture Development and Governance

Lead multi-year programs involving internal and external stakeholders. Lead the establishment and maturation of enterprise security architecture frameworks across infrastructure, cloud, and applications. Integrate threat modeling into the software development lifecycle (SDLC) to identify, prioritize, and mitigate architectural flaws early. Define, maintain, and enforce security policies, baseline standards, and secure design patterns. Develop reusable security reference architectures, data flow diagrams, and threat maps to accelerate secure delivery.

Risk and Compliance

Oversee application security assessments, secure design reviews, and risk analyses for critical systems. Assess systemic risks and prioritize remediation strategies in ambiguous or rapidly changing environments. Define risk-based security controls aligned with industry frameworks (e.g., NIST, OWASP, ISO 27001). Proactively identify architectural risks and software vulnerabilities to safeguard corporate resilience and regulatory compliance.

Architecture Research

Maintain currency with leading Security Architecture frameworks, security capabilities and threat modeling methodologies. Monitor evolving global threat vectors, vulnerability trends, and security technologies to keep enterprise designs future-ready. Evaluate security tooling, lead proofs-of-concept for security controls, and drive innovation in automation of security tooling. Partner with third-party vendors and system integrators to ensure external solutions meet organizational security standards.

| What you need to be successful

Undergraduate degree in Computer Science, Cybersecurity, Information Technology, or a related field. Minimum seven (7) years of experience in IT/security, including at least five (5) years of progressive experience in security or solution architecture across multiple security domains (network, cloud, app sec, IAM). Demonstrated experience conducting threat modeling (e.g., STRIDE, PASTA, Mitre Attack) and evaluating application security risks (e.g., OWASP Top 10) in modern software architecture. Minimum five (5) years of experience in technical leadership, mentoring, and cross-functional collaboration. Familiarity with enterprise architecture frameworks (e.g., TOGAF, SABSA) and recognized security certifications (e.g., CISSP, CISM, CSSLP). Eligibility to successfully complete enhanced background checks that may be carried out by Payments Canada, including criminal, credit, identity, employment, education, international security, and open-source media checks.

| You will really stand out with

Experience in financial services, regulated environments, or critical infrastructure. Practical experience architecting and securing cloud environments (GCP, AWS, or Azure). Hands-on exposure to CI/CD pipelines, container security, and DevSecOps integrations. Bilingualism (English and French) is considered an asset.

| Salary range Our target starting rate for this role is $119,850 with flexibility based on your experience and qualifications. The full salary range and benefits package are detailed below. Please submit your application by November 20, 2026.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Payments Canada's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Payments Canada's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Payments Canada's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.