Cyber Security Architect

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most.

The Cyber Security Architect is responsible for defining, designing, and assuring security architecture across the organization’s on-premises and hybrid technology estate. The role will work closely with Infrastructure, Cyber Security, Engineering, Risk, and delivery teams to ensure security is embedded by design and that solutions meet enterprise security, resilience, privacy, and regulatory requirements.

What You’ll Do Work with the Cybersecurity team to define and maintain security architecture, standards, reference patterns, and roadmaps for on-premise, cloud, and hybrid infrastructure. Embed cybersecurity requirements (‘security by design’) early in initiatives during the early design phases and subsequently assist the Security Advisory team on later stage cybersecurity assessments of initiatives. Provide security architecture leadership for data centres, cloud, networks, servers, storage, virtualization platforms, databases, middleware, end-user computing, and infrastructure management services. Design and assure security controls across core infrastructure, including network services, servers, Active Directory, virtualization, storage, backup and recovery, cyber vault, endpoint protection, encryption, key management and third‑party connectivity. Perform security design reviews, and technical guidance to engineering, data science, and platform teams. Partner with Cyber Operations to ensure infrastructure designs support effective monitoring, logging, detection, incident response, and recovery using SIEM, SOAR, XDR, EDR, NDR, IDS/IPS, and related security capabilities. Support cyber resilience initiatives, including immutable backup, privileged recovery, infrastructure recovery, ransomware containment, and recovery testing. Assess and guide the security of the organization’s growing AI footprint, including AI platforms, AI‑assisted development tools, and their integrations with enterprise infrastructure. Define appropriate AI security guardrails covering identity and access, data protection, prompt and context security, model and tool integration, logging, monitoring, human oversight, and incident response. Evaluate AI‑related threats such as prompt injection, sensitive‑data leakage, model or knowledge‑source poisoning, excessive agent privileges, insecure tool use, rogue agent behaviour, and unsafe AI‑generated code. Stay on the forefront of cyber – keep up‑to‑date with the latest trends and technologies to evaluate how they would address the evolving threat landscape. Provide technical leadership, coaching, and guidance to architects, engineers, project teams, and external delivery partners. Monitor emerging infrastructure and AI security threats, assess their relevance to the organization, and recommend pragmatic changes to security architecture and controls.

What You’ll Bring Extensive experience (5+ years) in Cyber Security Architecture with strong and demonstrable focus on hybrid infrastructure ecosystem in a large/complex enterprise. Work experience (2+ years) in cloud and hybrid security, particularly AWS, including IAM, KMS, GuardDuty, Security Hub, Private Link, WAF, CloudTrail, and network security controls. Strong hands‑on knowledge of on‑premises infrastructure security across enterprise networking, identity and access services, Windows/Linux servers, virtualization platforms, storage, backup, cyber recovery, endpoint security, vulnerability management, patching, certificates, encryption, and key management. Solid understanding of Zero Trust, Defense‑in‑Depth, network isolation, least privilege, secure administration, and privileged‑access controls. Exposure to security operations technologies and processes, including SIEM, SOAR, XDR, EDR, NDR, logging, detection engineering, threat hunting, and incident‑response playbooks. Good understanding of cyber resilience and recovery architecture, including ransomware containment, backup integrity, clean‑room recovery, identity recovery, and recovery validation. Knowledge of AI and Generative AI security, including LLMs, RAG, vector databases, embeddings, AI agents, tool use, AI‑assisted code generation, prompt injection, data leakage, model and RAG poisoning, agent privilege escalation, insecure tool integration, AI supply‑chain risk, and security controls for prompts, context, embeddings, memory, outputs, knowledge sources, models, plugins, tools, and supporting infrastructure. Familiarity with AI security guidance such as the OWASP T