Sr. Cybersecurity Global Portfolio Architect Job in Saskatoon Recruiting by Nutrien

At Nutrien, our purpose is Feeding the Future and we do so with safety, inclusion, integrity and results as our core values. Nothing is more important than sending our people home safe, every day.

Nutrien is a leading provider of agricultural products, services, and solutions. With over 26,000 employees world-wide, we are the largest producer of potash (by capacity) and one of the world’s largest producers of nitrogen and phosphate. We also operate a leading agriculture retail network that services over 500,000 growers globally.

We harvest the best. Diverse views and experience make us strong. We look for people who have a safety-first mindset, who are collaborative team players, who deliver on their commitments, act with integrity, and who support inclusion.

Working at Nutrien will provide you an opportunity to help us raise the expectation of what an agriculture company can beand grow your career.

The Senior Cybersecurity Global Portfolio Architect reports to Nutrien’s Chief Information Security Officer. 

This role works in a dynamic and fast-paced environment and with cross-functional teams (cyber security, business projects, and IT). The Sr. Cybersecurity Global Portfolio Architect will engage in an internal threat risk service focused on assessing and managing cyber security risks with new technology solutions being considered, developed, bought, or implemented. Key duties will be to identify and expedite requests when business opportunities require accelerated assurance to cyber security safely deliver cutting edge technology and innovation.

The role is a key participant in global enterprise projects seeking to further automate, globalize and standardize. You’ll forge strong working relationships with other teams and individuals including security analysts, senior enterprise architects, risk assessors, project managers and business leads. The role will allow teams/individuals to understand their information and cyber risk and manage them within Nutrien’s risk appetite.

Additionally, the position will be responsible for providing the appropriate teams with guidance on cyber security issues that need to be remediated. The individual must be able to work with and leverage Nutrien global cybersecurity support teams and architecture to provide superior solutions and advice to multiple layers of the Nutrien business teams.

What you will do:
• Cyber Security Architecture Consultant for Nutrien working in close collaboration with the Nutrien Cyber Security Architecture team
• Primary for performing Nutrien Threat and Risk Assessments on new initiatives
• Responsible to create and communicate a risk treatment plan to stakeholders highlighting any key risks that their initiative has and consulting with them as they work to remediate those risks
• Working as key team member on the Nutrien threat and risk teams to promote Nutrien’s cyber security architecture across the enterprise
• Maintain a strong understanding of current Cyber Security risks and vulnerabilities. Keep abreast of new behaviours by adversaries to ensure Nutrien has strong detection and prevention capabilities in place
• Leads client engagement interviews to frame & size engagements (Triage) and develops/defines risks & opportunities for risk reduction for engagements
• Conduct peer reviews within the Cybersecurity Architecture team, client communication and risk assessments to ensure consistency
• Leads the development of new Cyber Security patterns, templates, processes, and documentation
• Keep in tune with respect to new techniques and approaches to mitigating threats
• The role is the senior cybersecurity position in North America and is part of the Global Nutrien Cybersecurity Team

What you will bring:
• Core Competencies/Experience:

• Post-secondary Degree or Technical Diploma is preferred and eight or more years of related experience
• Comprehensive and practical experience in performing security architecture and risk assessment roles
• Cyber security-related certifications like CISSP or CRISC are considered an asset but not mandatory
• Knowledge and experience of agile software development practices within a global organization
• Knowledge and experience of DevSecOps practices, tools, and culture
• Knowledge and experience implementing OWASP frameworks such as SAMM and DSOMM
• Experience in ISO 31000 and or other risk management frameworks
• Experience in ISO 27001/27002, SOC2 Type II control frameworks
• Knowledge of privacy compliance frameworks such as CCPA, LGPD, GDPR
• Knowledge and experience of cloud services such as serverless, containers, CICD pipelines, secure code management, security benchmarks, identity services etc
• Fluent in written and conversational English, and experience working as part of global team and time zones
• Ability to work independently within a global team & frameworks