Referral Level: Level 3

Location: Toronto

Mackenzie Investments  

IGM Financial Inc. is a leading wealth and asset management company in Canada, managing approximately $310 billion in assets as of December 31, 2025. It offers financial planning and investment services to over two million Canadians through IG Wealth Management and Mackenzie Investments. 

Mackenzie Investments, founded in 1967, is a key part of IGM's business model, serving as a comprehensive asset-management partner for Canadian financial advisors and their clients. 

At Mackenzie Investments You Can Build Your Career with Confidence. We are proud to be recognized as one of Canada’s Top 100 Employers for the fourth consecutive year and one of Canada’s Best Diversity Employers. Our vision and strategy aim to innovate the industry and support Canadians in achieving their financial goals. 

Join our team to engage in continuous learning and skill development in a supportive environment. Experience the best of both worlds with our hybrid work environment, where you spend three days a week in the office, connecting, collaborating, and enjoying quality time with your amazing colleagues!  Our Values: Be better; we strive for improvement in everything we do. Be accountable; we foster clarity and are empowered to act responsibly. Be a team; we are united to drive collective impact to achieve our goals. 

Overall Job Purpose

The Director, Security Architecture & Advisory sets security architecture direction for a portfolio or platform/domain. Translates enterprise standards into actionable security guidance and advice. The role defines security architecture standards and patterns, guides target-state roadmaps and resolves cross-initiative and cross-solution security architecture complexity (dependencies, integration, sequencing, and technical debt) to enable delivery through clear security standards, pragmatic security advisory support and timely risk-based decisions.

Key Accountabilities

Security Architecture

• Set security architecture direction for a portfolio or platform/domain and ensure alignment to enterprise standards, technology strategy, and business priorities.
• Define and govern security domain standards, patterns, and reference designs (including security technology guardrails).
• Define and evolve the Security Domain Target Architecture and target-state roadmap, aligning sequencing and investments to multi-year priorities.
• Resolve cross-solution security architecture issues (integration, dependencies, interoperability) and drive pragmatic decisions on trade-offs and risk.
• Guide and coach security architects, ensuring consistent application of security principles and quality expectations without direct people management.
• Identify security architecture risk and technical debt and sponsor remediation and modernization plans.
• Participate in security architecture chapter activities (e.g., security standards, patterns, knowledge sharing, and peer reviews) to strengthen security practice consistency and capability maturity.

Security Advisory

• Provide trusted security advisory services to business and technology leaders, enabling risk-informed decisions and secure technology adoption.
• Lead Threat/Risk Assessments and security reviews for major programs, platforms, and initiatives, ensuring alignment with enterprise security standards, regulatory requirements, and risk appetite.
• Evaluate new technologies and vendors to determine strategic fit, advise on security risks and compensating controls for AI, data, identity, infrastructure, and third-party solutions.

AI Security

• Establish security requirements for AI platforms, control planes, agent frameworks, retrieval systems, model training, and inference environments.
• Evaluate AI platforms, models, and third-party AI services to determine security posture, architectural fit, data protection requirements, and enterprise adoption risks.
• Identify and address AI-specific security threats, including prompt injection, model poisoning, data leakage, excessive agent autonomy, insecure tool integrations, and AI supply chain risks.
• Provide security guidance for AI use cases involving sensitive, regulated, or confidential data, ensuring appropriate controls for data classification, access management, encryption, and model usage.
• Define security guardrails for AI agents, including authorization boundaries, tool access controls, execution environments, monitoring requirements, and human oversight mechanisms.
• Partner with engineering, data, privacy, and risk teams to embed secure-by-design principles throughout the AI solution lifecycle.

Qualifications

Security Architecture and Advisory

• Extensive experience leading security architecture and advisory across complex, enterprise-scale portfolios (solution and/or domain) and enterprise platforms.
• Strong capability in security governance, standards, target-state design, integration, and roadmap definition.
• Proven ability to influence senior stakeholders and drive outcomes across multiple teams without direct line authority.
• Skilled in facilitating trade-offs and risk decisions while balancing strategic coherence with delivery pragmatism.
• Deep expertise in security architecture, cloud technologies, application security, identity, data protection, and technology risk management.

AI Security

• Strong understanding of AI security risks, including prompt injection & agent hijacking; sensitive data exposure; excessive agent authority & privilege escalation; model, memory & supply-chain manipulation.
• Strong understanding of data protection, identity and access management, cryptography, and cloud security controls as applied to AI systems.
• Experience establishing governance and security requirements for AI agents, autonomous workflows, human-in-the-loop decision processes; aligned with emerging AI regulatory requirements, responsible AI practices, and AI risk management frameworks (e.g., NIST AI RMF).
• Experience securing AI platforms such as Azure OpenAI, Anthropic Claude, Google Gemini/Vertex AI, Amazon Bedrock, Salesforce Agentforce and equivalent enterprise AI services.