Job Description

Meet BenevityBenevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We're also one of the first B Corporations in Canada, meaning we're as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!We are seeking a Security Architect to lead the design and implementation of our security frameworks, ensuring the protection of our products, infrastructure, and operations. The ideal candidate has a strong technical background in security architecture, security operations, product security, infrastructure security, and engineering. You will work cross-functionally with engineering, IT, and compliance teams to define security best practices and mitigate threats. This role supports Benevity's mission to power purpose-driven businesses by securing the technology that enables companies to engage in social good and corporate giving. Additionally, you will play a critical role in ensuring the security resilience and trust of our products and services, safeguarding the integrity and reliability of the solutions we provide.What you'll do:Secure Architecture Design and Implementation:

• Architect, design, and implement secure architectures for applications, infrastructure, and cloud environments (AWS, Azure, GCP), considering scalability, performance, and cost optimization. Develop and maintain architectural blueprints and standards
• Define and champion secure design principles and patterns, ensuring their consistent application across all systems and projects. Provide expert guidance on secure architecture best practices

Risk Assessment and Threat Modeling

• Conduct risk assessments and threat modeling for products and infrastructure
• Drive the adoption of security best practices and standards across the organization. Champion security initiatives and promote a security-conscious culture
• Collaborate with product development teams to embed security into the SDLC (Software Development Lifecycle)
• Lead security incident response efforts, including investigation, containment, and remediation

Security Policy and Standards Development

• Provide guidance on secure network, system, and cloud configurations
• Implement and oversee security monitoring, logging, and incident detection capabilities
• Evaluate and integrate security tools for endpoint, application, and cloud security
• Ensure compliance with industry regulations and standards such as NIST, ISO 27001, SOC 2, GDPR, and HIPAA
• Train and mentor engineering teams on security best practices
• Develop and maintain security policies, standards, procedures, and guidelines, integrating them seamlessly within the overall security architecture. Ensure policies are aligned with industry best practices and regulatory requirements

What you'll bring:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field, can be substituted with relevant experience
• 8+ years of experience in security architecture, security engineering, or security operations, with a focus on architecture and design. Demonstrable experience leading and mentoring security engineers
• Expertise in cloud security (AWS, Azure, or GCP)
• Strong knowledge of identity and access management (IAM), encryption, firewalls, SIEMs, and EDR solutions
• Hands-on experience with container security (Docker, Kubernetes) and DevSecOps practices
• Proficiency in security frameworks such as MITRE ATT&CK, CIS Controls, and Zero Trust Architecture
• Familiarity with penetration testing, vulnerability assessments, and forensics
• Strong scripting and automation skills in Python, PowerShell, or Bash
• Certifications such as CISSP, CISM, CEH, or AWS Security Specialty are a plus

Preferred Skills:

• Experience working in highly regulated industries (e.g., finance, healthcare, government)
• Knowledge of blockchain security, IoT security, and AI security risks
• Experience with security orchestration, automation, and response (SOAR) tools

Discover your purpose at workWe're not employees, we're Benevity-ites. From all locations, backgrounds and walks of life, who deserve more xe2x80xa6Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose.If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you're valued for who you are and challenged to see who you can become xe2x80xa6It's time to join Benevity. We're so excited to meet you.Where we workAt Benevity, we have developed a Community First approach that we design our people's experience around with goals to build a strong community and culture, achieve stellar execution of our business goals and social mandate, and ensure Benevity-ites thrive. For those who live within a reasonable commuting distance to an office, we can split our time working in the office and from home to optimize the opportunities of both, with the requirement that we spend at least 50% of the time in the office.Join a company where DEIB isn't a buzzword
Diversity, equity, inclusion and belonging are part of Benevity's DNA. You'll see the impact of our massive investment in DEIB daily - from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams.We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine.That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity.Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to .

Benevity