About this role
RQ11202 - Sr. Technology Architect 1-year contract (250 business days) - 3 possible extensions Hybrid - 2 days onsite / 3 days remotes - 777 Bay St.
Security Level: CRJMC MUST HAVE: • 10+ years of experience in cyber security programs, frameworks, standards, and regulatory compliance, preferably within the public or broader public sector. • 10+ years of experience conducting cyber security assessments, including: • Threat Risk Assessments (TRAs) • Cyber Security Risk Assessments • Cyber security GRC program assessments
• 10+ years of experience evaluating technical and administrative controls; developing findings, risk logs, and reports; and preparing actionable, risk-based remediation plans. • Experience applying maturity models (e.g., NIST-based models, CMMI, or equivalent) to assess cyber security capabilities • 10+ years of experience applying industry-standard cyber security frameworks, including: • NIST Cybersecurity Framework (CSF) v1.1 and v2.0 • CIS Critical Security Controls v8 • ISO/IEC 27001
• 10+ years of experience preparing clear, structured written deliverables, including: • Cyber security and privacy assessment reports • Remediation plans and recommendations
Nice-to-have: • Demonstrated experience working with NIST CSF v2.0 is preferred
• 10+ years of experience presenting complex technical concepts, assessment findings, and risk insights to executive leadership, management teams, and diverse stakeholders. • One or more recognized cyber security certifications: • Certified Information Systems Security Professional (CISSP) • Certified Information Security Manager (CISM)
• Privacy certifications such as: • Certified Information Privacy Professional (CIPP) • Certified Information Privacy Manager (CIPM) • Certified Information Privacy Technologist (CIPT)
• Knowledge of Government of Ontario standards, policies, and directives (e.g., GO-ITS, EDSTA). Description: The Senior Technology Architect brings extensive expertise in cyber security and privacy controls to strengthen the cyber resilience of Ontario K?12 school boards. This role focuses on identifying vulnerabilities, cyber posture maturity gaps, guiding remediation, and enhancing protection for school boards' digital environments. The architect leads assessments, develops tailored action plans, and provides hands-on implementation guidance and support to improve the risk posture of school boards. This resource is responsible for, but not limited to: • Leading and conducting comprehensive cyber security and privacy assessments across Ontario K?12 school boards, including Threat Risk Assessments (TRA) and Cyber Security Risk Assessments • Preparing detailed assessment reports and present findings, risk insights, and remediation plans to school board leadership and stakeholders. • Developing board-specific actionable remediation plans to address identified gaps, mitigate risks and improve overall cyber resilience of K-12 school boards individually and sector-wide • Providing hands-on practical subject matter expertise and implementation guidance and support to enhance school board cyber protection capabilities, including: • Strengthening existing cyber security controls • Identifying, selecting, and implementing new cyber security controls • Enhancing privacy safeguards with a focus on minors as a priority • Complying with any applicable legislation, c