Security & Risk Architect

Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence. At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; The Cyber Security Architect is responsible for defining, designing, and assuring security architecture across the organization’s on-premises and hybrid technology estate. The role will work closely with Infrastructure, Cyber Security, Engineering, Risk, and delivery teams to ensure security is embedded by design and that solutions meet enterprise security, resilience, privacy, and regulatory requirements. Work with the Cybersecurity team to define and maintain security architecture, standards, reference patterns, and roadmaps for on-premise, cloud, and hybrid infrastructure. Embed cybersecurity requirements (‘security by design’) early in initiatives during the early design phases and subsequently assist the Security Advisory team on later stage cybersecurity assessments of initiatives. Provide security architecture leadership for data centres, cloud, networks, servers, storage, virtualization platforms, databases, middleware, end-user computing, and infrastructure management services. Design and assure security controls across core infrastructure, including network services, servers, Active Directory, virtualization, storage, backup and recovery, cyber vault, endpoint protection, encryption, key management and third-party connectivity. Perform security design reviews, and technical guidance to engineering, data science, and platform teams. Partner with Cyber Operations to ensure infrastructure designs support effective monitoring, logging, detection, incident response, and recovery using SIEM, SOAR, XDR, EDR, NDR, IDS/IPS, and related security capabilities. Support cyber resilience initiatives, including immutable backup, privileged recovery, infrastructure recovery, ransomware containment, and recovery testing. Assess and guide the security of the organization’s growing AI footprint, including AI platforms, AI-assisted development tools, and their integrations with enterprise infrastructure. Define appropriate AI security guardrails covering identity and access, data protection, prompt and context security, model and tool integration, logging, monitoring, human oversight, and incident response. Evaluate AI-related threats such as prompt injection, sensitive-data leakage, model or knowledge-source poisoning, excessive agent privileges, insecure tool use, rogue agent behaviour, and unsafe AI-generated code. Stay on the forefront of cyber – keep up-to-date with the latest trends and technologies to evaluate how they would address the evolving threat landscape. Provide technical leadership, coaching, and guidance to architects, engineers, project teams, and external delivery partners. Monitor emerging infrastructure and AI security threats, assess their relevance to the organization, and recommend pragmatic changes to security architecture and controls. Extensive experience (5+ years) in Cyber Security Architecture with strong and demonstrable focus on hybrid infrastructure ecosystem in a large/complex enterprise. Work experience (2+ years) in cloud and hybrid security, particularly AWS, including IAM, KMS, GuardDuty, Security Hub, Private Link, WAF, CloudTrail, and network security controls. Strong hands‑on knowledge of on-premises infrastructure security across enterprise networking, identity and access services, Windows/Linux servers, virtualization platforms, storage, backup, cyber recovery, endpoint security, vulnerability management, patching, certificates, encryption, and key management. Solid understanding of Zero Trust, Defense-in-Depth, network isolation, least privilege, secure administration, and privileged‑access controls. Good understanding of cyber resilience and recovery architecture, including ransomware containment, backup integrity, clean‑room recovery, identity recovery, and recovery validation. Knowledge of AI and Generative AI security, including LLMs, RAG, vector databases, embeddings, AI agents, tool use, AI‑assisted code generation, prompt injection, data leakage, model and RAG poisoning, agent privilege escalation, insecure tool integration, AI supply‑chain risk, and security controls for prompts, context, embeddings, memory, outputs, knowledge sources, models, plugins, tools, and supporting infrastructure. Familiarity with AI security guidance such as the OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, and the NIST AI Risk Management Framework. Ability to assess AI solutions from an enterprise infrastructure perspective, including hosting, network connectivity, identity, data flows, isolation, monitoring, resilience, and integration dependencies. Ability to balance strategic target‑state architecture with practical short‑term delivery needs and infrastructure constraints. Strong analytical and problem‑solving skills, with the ability to translate complex cyber risks into clear design decisions and actionable recommendations. Excellent written and verbal communication skills, with the ability to influence engineers, architects, delivery leaders, risk partners, and executive stakeholders. Relevant certifications an asset: CISSP (or CISSP‑ISSAP), SABSA, AWS Certified Security – Specialty, CCSP, and emerging AI/GenAI security certifications. Proven ability to design and govern enterprise security architectures, champion security‑by‑design, and collaborate across business and technology teams to deliver secure solutions aligned with cybersecurity strategy, governance, and Aviva security standards. Please note that individual salary is determined by factors such as job‑related knowledge, skills and experience, as well as internal equity. Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities. Competitive vacation package with the option to purchase 5 extra days off per year. Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion. Corporate wellness programs to support our employees’ physical and mental health. Employee discount on home and auto insurance (where applicable). Hybrid flexible work model. Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position. Aviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment. LI-PS1 #LI-Hybrid We help our 19.5 million customers to save for the future and manage the risks of everyday life. To give these customers the best possible products and service we know we must make Aviva the most attractive choice for talented, entrepreneurial people with diverse backgrounds and an evolving range of expertise and insight. So, we’re passionate about helping our 23,000 people to do the best work of their lives, to enable them to make a positive difference to the lives of our customers. #