Global Information Security Architect

Job DescriptionOn behalf of our client. Affinity is seeing a Global Information Security Architect for a full time permanent position. Candidates can be located in BC, AB or Ontario.
About The RoleWe are seeking a highly motivated and experienced Global Information Security Architect to join a global information security team. The successful candidate will be responsible for defining, maintaining, and governing end-to-end security architecture across global business processes, data, people, and technology. This strategic role involves developing conceptual, logical, and implementation-level architecture designs aligned with enterprise business objectives. A key focus will be providing expert recommendations on security best practices that enable business innovation while balancing organizational risk tolerance and ensuring systems are secure and private by design.
Key Responsibilities
Lead security architecture strategy for cloud migration and modernization initiatives across Google Cloud Platform (GCP) and Microsoft Azure environments, leveraging cloud-native security controls and services.
Partner with Engineering and DevOps teams to embed security into CI/CD pipelines through a Shift Left approach.
Architect secure containerization strategies using Kubernetes, GKE, and AKS, as well as enterprise API security frameworks.
Develop security governance frameworks and guardrails for emerging technologies, including Generative AI and Large Language Models (LLMs).
Develop, maintain, and govern the enterprise security architecture framework, translating it into consistent and compliant security designs across programs and projects.
Participate in Architectural Review Boards, providing security recommendations that support business innovation while managing enterprise risk.
Collaborate with Project Managers, Solution Architects, and technical teams to integrate security and privacy into solution designs.
Lead the implementation and integration of new security tools and technologies within the existing enterprise security architecture.
Create and maintain comprehensive security architecture documentation, technical designs, and diagrams.
Identify security gaps in existing and proposed architectures and recommend appropriate remediation strategies.
Review technical documentation to ensure security requirements are clearly defined and implemented.
Support the development and enforcement of data security and application security policies, standards, and procedures.
Conduct security architecture reviews and assurance activities to identify risks and validate compliance across enterprise systems.
Monitor evolving security threats, industry standards, and emerging technologies to continuously refine security architecture and risk-based strategies.
What You Bring
10-15 years of progressive cybersecurity experience, including at least 7 years in a Security Architecture role, preferably within a large, multinational organization.
Demonstrated experience leading large-scale cloud migration and modernization initiatives.
Deep expertise in designing and implementing Zero Trust architectures, transitioning organizations from perimeter-based security to identity-centric security models.
Bachelor's or Master's degree in Computer Science, Information Security, or a related discipline.
Relevant industry certifications such as CISSP, CISM, or equivalent.
Cloud-specific certifications are highly preferred, such as Google Professional Cloud Security Engineer or Microsoft Cybersecurity Architect Expert.
Strong understanding of security frameworks, including NIST, ISO 27001, TOGAF, and SABSA, and their practical application within cloud environments.
Knowledge of cloud cybersecurity reference architectures, including Microsoft's Cybersecurity Reference Architecture (MCRA) and Google Cloud Security Architecture.
Strong technical documentation skills, including security architecture designs, policies, standards, and procedures.
In-depth knowledge of common security vulnerabilities, OWASP Top 10, exploitation techniques, API security, and container security (Docker/Kubernetes).
Excellent communication and stakeholder management skills, with the ability to provide security direction and guidance to both technical and non-technical audiences.
About AffinityAffinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.
For more information on Affinity, please visit
Job Number: 14162
#J-18808-Ljbffr