Meet Benevity

Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!

We are seeking a Security Architect to design and implement security architecture and controls across our products, infrastructure, and operations. The ideal candidate has a strong technical background in security architecture, security operations, product security, infrastructure security, and engineering. You will work cross-functionally with engineering, IT, and compliance teams to define security best practices and mitigate threats. This role supports Benevity’s mission to power purpose-driven businesses by securing the technology that enables companies to engage in social good and corporate giving. Additionally, you will play a critical role in ensuring the security resilience and trust of our products and services, safeguarding the integrity and reliability of the solutions we provide.

What you’ll do

Secure Architecture Design and Implementation:

Architect, design, and implement secure architectures for applications, infrastructure, and cloud environments (AWS and GCP preferred), considering scalability, performance, and cost optimization. Develop and maintain architectural blueprints and standards

Define and champion secure design principles, reusable patterns, and standards across products and infrastructure. Provide expert guidance on secure architecture best practices

Represent Security in the Architecture Decision Record (ADR) program and Architecture Review Board (ARB), reviewing security-relevant decisions and providing clear, actionable guidance to engineering and architecture partners

Perform security reviews of High-Level Architecture (HLA) proposals, including threat considerations and control recommendations, and partner with product and platform teams to close findings

Risk Assessment and Threat Modeling:

Conduct risk assessments and threat modeling for products and infrastructure, including for new and changing HLAs and major architectural initiatives

Drive the adoption of security best practices and standards across the organization

Champion security initiatives and promote a security-conscious culture

Collaborate with product development and Product & Application Security teams to embed security into the SDLC (Software Development Lifecycle)

Support technical security incident response efforts, including investigation, containment, and remediation

Security Policy and Standards Development

Provide guidance on secure network, system, and cloud configurations

Implement security controls as code (e.g., Terraform and related IaC) for cloud and edge protections such as WAF, in partnership with platform and DevOps teams

Conduct vendor security architecture reviews for technologies that affect Benevity’s security posture

Implement and oversee security monitoring, logging, and incident detection capabilities

Evaluate and integrate security tools for endpoint, application, and cloud security

Ensure compliance with industry regulations and standards such as NIST, ISO 27001, SOC 2, and GDPR

Train and mentor engineering teams, and provide technical mentoring to the security team, on security best practices

Develop and maintain security architecture standards, technical guidelines, and related procedures, integrating them seamlessly within the overall security architecture and aligning with industry best practices and regulatory requirements

What you’ll bring

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field, can be substituted with relevant experience