Principal Architect, Security (Digital Banking)

Purpose of the Job:
This role is responsible for securing EQB’s Digital Banking and Channel Technology assets. It provides design input for security controls within Digital Banking technology architecture and serves as the single point of contact for security services engagement required by Digital Banking & Channel Technology teams. This senior leadership position oversees the implementation of security by design, security by default, secure development, and validation for Digital Banking initiatives related to our customer-facing website and associated back-end infrastructure.

Main Activities:

• Acts as cyber security champion and ambassador for Digital Banking & Channel Technology team and actively engages with the leadership team to support business outcomes with security advisory services.
• Ensures seamless onboarding to the right security services as needed.
• Act as liaison between Cyber Subject Matter Expert teams and the Digital Banking & Channel Technology team ensuring right-sized security engagements.
• Provide security control design input for Digital Banking & Channel Technology apps initiatives, ensuring control design is right-sized, risk based and meet regulatory and compliance security requirements.
• Engage with Digital Banking & Channel Technology and business teams (Fraud, Marketing, EQ Bank Product) to ensure security controls implementation and remediation are prioritized as needed.
• Develop tools, documentation that will enable Digital Banking & Channel Technology teams to efficiently embed security into practices of building, releasing and maintaining technology systems under their purview (shift-left initiatives)

Knowledge/Skill Requirements:

• A college diploma or university degree in computer science (or related course) or Industry recognized certifications (e.g. CISSP) with 7 years cyber security experience is required.
• Minimum of 8 years of technical IT experience.
• Minimum of 6 years of Cyber Security experience
• Minimum of 2 years of experience with consumer banking platforms (frontend and backend)
• Strong knowledge of cyber security frameworks, controls and practices
• Strong DevOps / development or security architecture knowledge, (prior hands-on technology engineering experience is preferred)
• Microsoft Azure solutions Architect expert, Microsoft Cyber security Architect Expert, Sherwood Applied Business Security Architecture (SABSA) Foundation, Practitioner or Master level designations, TOGAF certifications are a plus
• Strong experience architecting and implementing solutions in Cloud environments (Microsoft Azure)
• Strong experience with APIs, containers and CMS or security consulting for similar solutions.
• Strong experience documenting architecture flows and diagrams.
• Good knowledge of cyber threats, risks and control design best practices. Preferrable to have experience in threat modeling or risk assessments.
• People & resource management
• Strategic and Financial Planning
• Process design and implementation experience is a plus
• Technology Roadmaps
• Ownership & Accountability