Lead Security Architect

Overview

At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.

KPMG Canada is looking for an experienced individual to fulfil the role of Lead Security Architect in our Information Technology Services team. This role offers a unique opportunity for someone highly skilled in multi-cloud technologies, secure architectural design, and DevSecOps. The main goal is to lead technological initiatives and stay ahead of the evolving security landscape, which includes areas like AI technology and architecture and embed security in early stages of solution lifecycle.

What you will do

• Review technology solution architectures developed by Technology solution architects for adherence to Security best practices and KPMG standards. Provide guidance and advice as required to technology architects to embed security earlier in the design. This individual will ensure security by design early in the solution life-cycle
• Provide proactive guidance and advice by way of early engagement with technology solution architects
• Capacity building within technology teams through regular engagement with technology solution architects by way of sharing security requirements knowledge and garnering cohesive secure solution building practice
• This individual will liaise with Technology solution architects within the firm, develop security architecture roadmaps in compliance with KPMG Standards, prepare tactical plans, maintain knowledge base of Security architectural requirements, various technologies and solutions within the firm
• Develop and maintain security architecture artifacts (models, templates, standards, and procedures) that can be used to leverage security capabilities, in line with established security standards
• Act as a subject matter expert in areas pertaining to Cloud technology security across (but not limited to) Cloud platforms such as Azure, AWS . Provide security recommendations and SME guidance to Technology and Business teams for their design & development initiatives
• Responsible for embedding security requirements and objectives into architecture and DevOps as per business requirements, reviewing security in technical architectures for applications and products & services to ensure they meet security standards and creating security-embedded reference architectures that can be leveraged by technology functions across the firm to rapidly develop secure solutions in a multi-cloud environment
• Analyzing requirements for Cloud security tool and technology (SIEM, Endpoint Protection, Vulnerability Management, DLP, other), work closely with Cloud engineering team

What you bring to the role

• 8+ years’ experience with secure design and architecture for cloud and on-prem environments
• Bachelor’s or master’s degree in Information Technology, Computer Science, or a related work experience, or equivalent
• Previous security experience in a consultancy role collaborating with internal Technology, Project and Business teams
• Knowledge of information security standards/practices (e.g., CSA CCM, ISO Standards including AI standards ,NIST CSF, NIST 800:53, OWASP, etc.), industry standard security architecture models ( like TOGAF, etc), Threat models, DevSecOp practices
• Experience interpreting business, technology, and threat drivers, and develop practical security roadmaps to deal with these drivers
• Experience with application security & cloud security engineering, embedding security with CI/CD pipelines & secure coding practices
• Applied knowledge of methodologies to conduct threat-modeling exercises on new applications and services
• Experience in designing security for building cloud architecture with public cloud platforms such as Azure, AWS and GCP
• Applied knowledge of Infrastructure as Code, Automation, and Orchestration
• The ideal candidate will maintain one or more of the following certifications: CISSP, ISSAP, Microsoft Azure Security Technologies Certification, Azure Solutions Architect Expert Certification, CISM, CISA, and/or CCSP

KPMG BC Region Pay Range Information   

The expected base salary range for this position is $105,000 to $156,600 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program. 

KPMG Ontario Region Pay Range Information

The expected base salary range for this position is $105,000 to $156,600 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.

Providing you with the support you need to be at your best

Our Values, The KPMG Way

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

Adjustments and accommodations throughout the recruitment process

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.

AI Usage

We embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.

We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.