(As a unionized employer, Centennial College gives preference to internal candidates as defined in the collective agreement. External candidates will be considered only if there are no qualified internal candidates)
Centennial College recognizes and affirms Diversity, Equity and Inclusion and Indigenous ways of knowing as central to the vibrancy and uniqueness of its learning and working academic mission. We strongly encourage applications from members of Indigenous communities and all equity-deserving groups including Women, Racialized, Persons with Disabilities, and LGBTQ+ communities.
We also recognize that Centennial is situated on the Treaty Lands of the Mississaugas of the Credit First Nation and pay tribute to their legacy as well as that of all First Peoples that have been and remain present here in Toronto. We recognize that First Peoples come from sovereign Nations and that part of understanding our responsibilities of residing on this territory are understanding the true history, circumstances and legacy of the Treaties signed here (such as the Toronto Purchase, Robinson-Huron Treaty and Williams Treaties) and including pre-contact Treaties and Agreements between sovereign Nations and that all peoples in this area are therefore Treaty people with obligations and responsibilities to all our relations.
Position Summary
Cybersecurity and privacy are critical to both the reputation and financial viability of the College and have been identified as top priority items for the institution. In the fast-moving world of higher education technology, it is imperative that institutions have well informed plans to ensure that all aspects of cybersecurity and privacy are addressed. To achieve a secure and high functioning environment it is necessary to create a target state for technology which addresses potential areas of exposure and identifies how these gaps can be reduced to appropriate and approved levels.
Reporting to the Associate Director, Cybersecurity and Privacy Operations, the Cybersecurity Architect will work with project teams to conduct and manage cybersecurity risk assessments including those with AI embedded capabilities, design the target state and lead the implementation of projects that improve the College’s cyber resilience and maturity. The incumbent will have a wide-ranging knowledge of technology, including networks, and cloud offerings – knowledge of Banner ERP is highly desirable. The Architect will work on strategic transformational initiatives as well as with members of IT to address risks in IT operations and find appropriate solutions. Finally, a key part of the role is keeping all of IT Management informed on cybersecurity risks including the rationale behind cybersecurity designs, architectures and solutions, including articulating the business value, as well as monitoring how the risk register and mitigation plans are evolving over time.
Responsibilities
- Conduct Cybersecurity and AI risk assessments, manage the risk register, risk mitigation plans and risk dashboards
- Develop Cybersecurity Architectures aligned with corporate plans, in collaboration with the college’s Enterprise Architecture and Risk Management teams
- Design and construct cybersecurity technology roadmaps, plans, and associated components that provide an efficient set of technology resources and supports future business directions.
- Guide and support technology investment decisions while understanding the business' economic and financial levers that impact digital transformation.
- Contribute to the creation and maintenance of a mature organizational cybersecurity framework, including the development of policies, procedures and standards.
- Act as a subject matter expert for the development of internal or 3rd party Cybersecurity Maturity Assessments.
- Lead the creation and maintenance of reference architectures to ensure they are reflective of the operational environment
- Design solutions that support strategic planning decisions and outcomes.
- Reduce inefficiencies and duplication through the use of shared technology solutions.
- Improve the organization’s security posture, efficiency of operations and reporting of potential risks through the identification and implementation of cybersecurity controls
- Monitor and report on progress of activities required to achieve target state architectures
- Conduct periodic reviews to ensure projects and ongoing operations are aligned with cybersecurity architectures
- Monitor data access controls to ensure data protection measures along with policies and procedures are being followed.
- Monitor the value proposition and return on investment of implemented cybersecurity tools and technologies
- Remain current on industry cybersecurity frameworks, advancements in technologies in the cybersecurity and other related fields and on the cyber threat landscape including emerging threats and vulnerabilities
- Provide leadership to the College in technology direction and policies related to cybersecurity.
- Provide expertise and guidance to build and develop solutions that meet future needs and take advantage of the latest technologies.
- Lead working groups (including vendor working groups) to provide direction in capabilities and technology choices.
- Communicate broadly and deliver presentations to College wide committees and senior management.
- Remain current on higher education technology directions. Work with user groups from other higher education organizations to help identify and communicate opportunities for students, faculty, and staff. Attend seminars and workshops, such as Ellucian and Educause as applicable.
Qualifications/Experience
- 4-year Bachelor’s Degree (e.g. BSc) in Business, Computer Science, Computer Engineering, Electrical Engineering, Systems Analysis or an equivalent combination of relevant education and experience.
- Any of the following certifications or equivalent: TOGAF/SABSA/CISSP/GSEC/GCIH/CCISO/CISM
- Demonstrated experience in Cybersecurity Risk Management and Risk Management frameworks including NIST CSF 2.0, ISO 27001, CIS Critical Controls and MITRE ATT&CK.
- Eight (8) or more years of progressive experience in at least three of the following disciplines:
- Security Architecture Design: Designing and implementing robust security architectures for complex systems and networks
- Identity and Access Management (IAM) Architecture: Designing and implementing secure identity and access management solutions.
- Cloud Security Architecture: Designing and implementing robust security controls, identity management, and data protection mechanisms within cloud platforms
- Threat Modeling and Risk Assessment: Identifying potential threats, conducting risk assessments, and developing mitigation strategies to protect critical assets.
- Security Standards and Compliance: Application of industry-leading security standards, frameworks (such as NIST, ISO 27001), and regulatory requirements to ensure compliance and adherence to best practices.
- Demonstrated experience in operations planning, applications design and planning. Business Intelligence experience is an asset.
- Demonstrated experience working on security controls projects implementation and skilled in project coordination.
- Previous experience working with Client Services and Helpdesk.
- Strong writing and verbal communication skills in order to work in a large client oriented working environment.
- Demonstrated commitment to ongoing personal development and upgrading of technical skills through business activities.
Apply online: www.centennialcollege.ca/careers
Proof of credentials or equivalencies from accredited regional or federal post-secondary institutions and/or their foreign equivalents will be required at the time of job offer.
When applying, your cover letter and résumé must include examples that reflect all of the requested skills and qualifications and must be submitted online by July 30, 2026 at 11:59 PM EST. Please quote Job ID J0726-0797. Misrepresentation of applicant information will be grounds for your exclusion from the competition or for dismissal should you subsequently be hired for the position. We wish to thank all applicants for their interest and advise that only those selected for an interview will be contacted.
We are committed to providing persons with disabilities equal opportunities regarding all employment activities, including access to jobs and accommodations during employment as required, in accordance with the Ontario Human Rights Code (OHRC) and the Accessibility for Ontarians with Disabilities Act (AODA).
