Global Security Architect

Remote Role British Columbia or Alberta

About the role:

We areseekinga highly motivated and experienced Global Security Architect to join our global information security team. The successful candidate willbe responsible fordefining,maintaining, and governing an end-to-end security solution design that spans global processes, data, people, and technology. This strategic role involves creating conceptual, logical, andimplementationarchitecture views aligned with global business needs. A key focus will be to provide expert recommendations on security best practices that are business enablers, balancing the risk tolerance of Colliers while ensuring systems are secure and private by design.

• Lead the security architecture strategy for cloud migration and modernization initiatives, specifically within Google Cloud Platform (GCP) and Microsoft Azure environments. Ensure designs leverage cloud-native security controls (e.g., Google Cloud Armor, Azure Sentinel, VPC Service Controls) effectively.

• Partner with Engineering and DevOps teams to embed security into the CI/CD pipeline ('Shift Left'). Architect secure containerization strategies (Kubernetes/GKE/AKS) and API security frameworks.

• Develop governance and security guardrails for the adoption of emerging technologies, including Generative AI and Large Language Models (LLMs), ensuring safe business enablement.

• Develop,maintain, and govern the global security architecture framework, translating it into robust security designs for all enterprise programs and projects to ensure a consistent and compliant posture.

• Serve as a key member of the Architectural Review Board, providing security recommendations on technology initiatives that enable business innovation while balancing the company's risk tolerance.

• Collaborate with Project Managers, Solution Designers, and technical teams to integrate security and privacy into solution designs.

• Lead the implementation of new security tools and technologies, overseeing their integration into the existing global security architecture.

• Create andmaintaincomprehensive security technical architecture design documents and diagrams.

• Identifysecurity gaps in existing and proposed architectures and recommend changes or enhancements.

• Conduct technical documentation reviews, ensuring security considerations are well-defined and implemented.

• Support the development and enforcement of Data security/Application security policies, standards, and procedures.

• Conduct security reviews and assurance activities toidentifyrisks andvalidatesecurity compliance across corporate systems.

• Continuouslymonitorthe evolving security landscape and technological advancements to adapt and refine risk-based security strategies.

What you bring:

• A minimum of 10-15 years of progressive experience in cybersecurity, with at least 7 years in a security architecture role, preferably within a large, multinational organization. Must includedemonstratedexperience leading large-scale cloud migrations.

• Deepexpertisein designing Zero Trust architecture, moving the organization away from perimeter-based security to identity-centric security models.

• Bachelor of Science or Master of Arts in Computer Science, Information Security, ora relatedfield.

• Certified Information Systems Security Professional such as CISSP, CISM or equivalent. Cloud-specific certifications (e.g., Google Professional Cloud Security Engineer, Microsoft Certified: Cybersecurity Architect Expert) are highly preferred.

• Strong understanding of security frameworks such as NIST, ISO 27001, TOGAF, or SABSA, and their practical application in cloud environments.

• Reference Architectures:Demonstratedknowledge of, or hands-on experience with, cloud cybersecurity reference architectures such as Microsoft’s Cybersecurity Reference Architecture (MCRA) and Google Cloud Security architecture.

• Technical Documentation: Strong documentation skills for security designs, policies, and procedures.

• Strong knowledge of common vulnerabilities, OWASP Top 10, exploitation techniques, API Security, and Container Security (Docker/Kubernetes).

• Ability to communicate effectively with technical and non-technical stakeholders, providing security direction and guidance.

Pursuant tothe lawsregardingjob postings where the position is,

Colliersdisclosingthe following information: