Lead Cybersecurity Architect - Manulife, Toronto

AI Summary

Manulife is seeking a Lead Cybersecurity Architect in Toronto, Ontario. This role involves designing robust security strategies and solutions to protect the firm's digital assets. Key duties include architectural design, strategic planning, and risk management, including financial analysis of security technologies. Candidates require at least 10 years of senior information security architecture experience, particularly within the financial services industry, and relevant certifications such as CISSP or CCSP.

About the Opportunity at Manulife

Manulife is actively growing its cybersecurity program with a vision to deliver secure, high-quality applications at scale. As a Lead Security Architect, you will play a crucial role in shaping the global security posture, ensuring that security is a foundational element across all technology and business initiatives. This individual contributor position reports to the Chief Security Architect and serves as the dedicated security architecture lead for a specific business unit, ensuring alignment with the global security framework while addressing unique segment needs. The role is based in Toronto or Waterloo, Ontario, operating on a hybrid model (three days in office, two days from home), and requires willingness to travel within Canada and the USA to support business operations and stakeholder engagement. This is a vital management position for the firm's information security.

Key Responsibilities and Impact

This role encompasses a broad range of responsibilities, including leading the architectural design and development of robust security frameworks, standards, and best practices for global systems, data, and networks. You will translate business, technology, and threat drivers into practical security roadmaps, ensuring the security strategy is aligned with broader organizational goals. A crucial aspect involves conducting financial analysis of security technologies, quantifying purchasing and licensing options, estimating labour costs, and calculating the total cost of ownership and return on investment. The Lead Cybersecurity Architect will also draft project plans for security service and technology deployments, coordinating with stakeholders across Manulife's business and IT units, including enterprise architecture and risk management, to integrate security seamlessly throughout the entire project lifecycle. This includes designing and implementing security frameworks for Machine Learning, Generative AI, and Agentic AI systems, and providing deep expertise in securing multi-cloud environments like Microsoft Azure and AWS. Effective information management and communication are vital for success in this role.

Required Qualifications and Experience

To excel in this Lead Cybersecurity Architect role at Manulife, candidates must possess a strong blend of technical expertise and professional experience. A Bachelor's or Master's degree in computer science, information systems, cybersecurity, or a related field is required, alongside relevant industry certifications such as CISSP or CCSP. Applicants must demonstrate at least 10 years of experience specifically in senior information security architecture roles, showing clear progression in responsibility and complexity. Proven experience within the financial services industry is essential, including a deep understanding of regulatory requirements, compliance frameworks, and industry-specific security challenges. Direct, hands-on experience or strong working knowledge of managing security infrastructure, including firewalls, intrusion prevention systems, web application firewalls, endpoint protection, SIEM, and log management technology, is critical. This also includes verifiable experience reviewing application code for security vulnerabilities, securing CI/CD pipelines, and conducting threat-modelling exercises. Extensive knowledge of full-stack IT infrastructure, including applications, databases, operating systems, and cloud services, is expected. Strong communication, problem-solving, and collaboration skills are also vital for effective management of complex security initiatives.