Cyber – Security Architect Jobs

In a changing world, unprecedented challenges require unmatched talent. Join one of Montreal's Top Employers in 2023. We are a dynamic and growing organization having its main establishment located in downtown Montreal and part of a leading international banking institution fully committed to building a more sustainable future. Note that the position may be in the Canadian Branch of BNP Paribas or in one of its subsidiaries based in Montreal.
The position at a glance
The Security Architecture (SecArch) Team is the technical arm of BNPP Application Security team. The team is responsible for integrating security into the systems development lifecycle.
The Security Architecture (SecArch) Team members assess the current state; develop recommendations; write and implement policies, standards, and processes; and implement the new approach for integrating cybersecurity into the systems development lifecycle. To be successful in this role, candidates are expected to act as subject matter experts in infrastructure, application security with a proven track record in cloud, systems design, site reliability engineering, and/or DevSecOps.
In detail
Candidates to be measured on the following four performance drivers, which will dictate how individual impact is considered on the Americas platform:

• Is responsible for driving outcomes which have meaningful effect on team or department
• Demonstrates good judgement when making decisions of high complexity and impact
• Relies on limited guidance for most complex decision making
• Impacts division and influences peers and team
• Results and Impact

Leadership and Collaboration

• Acts in leadership capacity for large projects, processes, or programs for a team
• Creates trust with department leaders

Client, Customer and Stakeholder Focus

• Able to build relationships with a mix of intermediate and senior colleagues or clients
• Demonstrates the ability to persuade and influence stakeholders at the team level
• Interacts regularly with management and department leaders

Compliance Culture and Conduct

• Takes full responsibility for personal actions and demonstrates courage in facing problems and conflicts
• Perceived as a person of high moral character; upholds corporate values and displays high ethical standards”

Responsibilities:

• Initiate and execute the security relevant processes to integrate cybersecurity into the IT systems development lifecycle to include but not limited to:
• Review of available and applicable controls to mitigate cybersecurity risks to IT projects
• Provide technical guidance to address risks identified in areas such as authentication, authorization, auditing, application security, secure data transport and storage
• Review of IT architectures for relevant cybersecurity risks
• Act as thought leaders for addressing new security challenges such as IoT, cloud, robotics, and artificial intelligence
• Develop structured recommendations to better integrate security into the IT systems development lifecycle
• Represent, where applicable, Security Architecture role in information technology validation committees
• Author policies, standards, and processes to facilitate effective and efficient integration of security into the IT systems development lifecycle
• Cyber risk assessments for IT projects
• Lead architecture evaluating security design for new and existing infrastructure, applications
• Articulate security issues to technical and non-technical audience
• Development and review of cybersecurity requirements for IT projects

The Strengths And Skills That Will Help You Succeed

• OS Security, e.g. Unix, Linux, and Windows
• Deep understanding of OSI model
• Broad understanding of threats faced by the financial sector
• Understanding of common protocols, e.g. Active Directory, LDAP, SMTP, DNS, file sharing, routing protocols
• Having worked on cryptography libraries, SSL/ TLS , HSM , certificates & PKI infrastructure in programming
• In depth knowledge of security concepts regarding application, web and infrastructure security. Understanding of current and emerging technologies and threats
• Strong problem solving and analytical skills, verbal and written communication skills
• Ability to work independently and effectively managing and prioritizing multiple tasks, by setting expectations and handling high-pressure situations with tight deadlines
• Security devices, e.g. Firewalls, VPN, AAA systems
• Knowledge of English is required
• Experience leveraging the MITRE ATT&CK Framework
• Articulating infrastructure and application security issues to technical and non-technical audience
• Excellent understanding of information security, including emerging threats and attack methodologies
• Hands on design, engineering, and migration experience in cloud, e.g. Azure, AWS, GCP, and/or IBM
• Experience interpreting networking, application data flow, and security architectural diagrams to identify attack vectors an adversary may seek to exploit
• Excellent interpersonal skills and the ability to work effectively with others as a team

Preferred Qualifications;

• Financial sector experience
• Bachelor’s or Master’s degree level qualification or equivalent
• Experience in leveraging a threat modeling tool
• Programming knowledge in Python, Java and/or C++, OOP concepts, data structures
• Excellent writing and presentation skills to communicate design and recommendations to different audiences and stakeholders
• Security Architecture Framework SABSA, O-ESA and OSA
• 4+ years of experience with infrastructure engineering or architecture in the financial sector, threat modeling and risk analysis
• Information security, cloud, network, or systems engineering certifications (e.x CISSP, ISSAP, CCSP, CCSK, CCNA, GIAC)

FINRA Registrations Required:
Not Applicable
What’s In It For You
In addition to competitive compensation, we offer flexible benefits including a family and spouse insurance program, a defined contribution pension plan and paid days for volunteering. Hybrid work arrangements, such as remote working up to 50% and flexible working hours are available for most positions. BNP Paribas provides excellent training and personal development programs, as well as opportunities for career development within the company and internationally.
To find out more about our range of benefits, click here
What You Need To Know

• We will review candidates as they apply, so don’t wait to submit your application;
• You must be legally eligible to work in the Greater Montreal area and, if applicable, hold a valid work or study permit. Physical presence in BNP Paribas’ office(s) is an essential function of this position;
• If you are selected to participate in the recruitment process, please inform Human Resources of any accommodations you may require. BNP Paribas will work with you to ensure that you are able to participate fully in the process;
• Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply. These will be clearly mentioned in the qualifications of the position;

Diversity, Equity and Inclusion (DE&I) at the heart of our commitments
At BNP Paribas all employees are on an equal footing allowing us to create a work environment that values and respects people for their talents, skills and competences.
BNP Paribas recruits, employs, trains, compensates and promotes regardless of race, religion, colour, national origin, sex, disability, age, and other protected status (Employment Equity Act and Canadian Human Right Act).
To learn more about our DE&I commitments, click here
About Us
BNP Paribas is the top bank in the European Union and a major international banking establishment. Present in 65 countries, with more than 190,000 employees, the bank holds key positions in several areas of banking and financial services.
BNP Paribas’ mission is to contribute to a responsible and sustainable economy by financing and advising its clients according to the highest ethical standards, while striving to respond to essential concerns in terms of the environment, regional development and social inclusion.
Since 1961, BNP Paribas has supported large Canadian companies and institutions in their business development by offering a full range of specialized financial services and investment products.
With over 1,200 employees, BNP Paribas in Canada continues to attract experts from diverse fields as well as ambitious young talent from around the world. We are proud to offer our employees a rewarding and international workplace where they can build their professional careers by honing their skills, meeting challenges and enriching their knowledge of the financial industry.
Our certifications and partnerships

• Canada's Best Diversity Employer 2023
• Rainbow Accreditation issued by Canada’s LGBT+ Chamber of Commerce (CGLCC)
• Montreal Top Employer 2023
• Part of Les Affaires top 300 companies in Quebec
• CCDI Consulting Inc. (Canadian Center for Diversity and Inclusion)
• Women in Governance – Parity certified - Gold certification
• IndigenousWorks
• ROSEPH – Grouping of specialized organizations for the employment of persons with disabilities
• Pride at Work Canada

Do you want to discover other BNP Paribas offers in Canada?
Click here: BNP Paribas in Canada | Our job offers
** Only selected applications that meet the requirements of the role will be contacted **
Primary Location
CA-QC-Montréal
Job Type
Standard / Permanent
Job
INFORMATION TECHNOLOGY
Education Level
Bachelor Degree or equivalent (>= 3 years)
Experience Level
At least 5 years
Schedule
Full-time