Avp, Security Operations

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

Reporting directly to the VP, Security Engineering and Advisory, the **AVP, Security Operations **will be responsible for leading the development and operational functions of the Sun Life Cyber Security program on an enterprise-wide basis. This includes the procedures, capabilities and services, oversight and management of third party security services vendors, and the execution of all security projects; from inception to completion across all Sun Life (SL) regions.

The AVP, Security Operations advises the CISO on security direction and resource investments, and designs appropriate policies to manage information security risk. The complexity of this position requires a leadership approach that is engaging, imaginative, and collaborative, with a sophisticated ability to work with other Sun Life leaders to set the best balance between security strategies and other priorities at the Enterprise level.

The AVP, Security Operations will be required to interact and liaise with both senior and executive management across Digital Business and Technology Solutions (DBTS), other Sun Life Business Units (e.g. Legal, Privacy, Operational Risk, Internal Audit), International Sun Life Business Units (e.g. Asia region, UK, US), participate and lead the Major Incident Management (MIM) process (where required), and to ensure that the Security Operations team maintains compliance with regulatory requirements, policy and standards, industry recognized cyber security certifications (e.g. HiTrust, ISO, PCI, DSS, SOC, SSAE 16, HIPAA) and client requirements (where applicable).

The AVP, Security Operations will manage and direct team performance to ensure that service levels are effectively met and will establish a program of continuous improvement to ensure that security services operate efficiently. The AVP will be required to ensure that employees are developing and progressing towards their objectives to maintain a high performing team.

The AVP, Security Operations will have direct oversight over the following teams:
1. Engineering and Operations Strategy and Program
- Accountable for the delivery and implementation of security projects that support the overall Cyber Security program
- Establishes a three year direction for security related technologies or other controls that need to be put into place to reduce future security risks and improve operational stability/reliability
- Develop the architecture strategy for security related projects
- Establishing and communicate relevant best practice scenarios relating to Cyber Security
- Establish business case proposals for security projects (CBA, financials, resource planning)

2. Security Engineering
- Accountable for the delivery and implementation of security projects that support the overall Information Security program.
- Responsible for driving contracts and agreements; working with SL legal and the vendor teams to come to agreeable terms.
- Accountable for the upward communication of project deliverables, status, and escalations to the executive level.
- Provide leadership and direction to the project delivery teams to assist in driving out project deliverables, prioritizing actions, assisting with overcoming obstacles that arise through the lifetime of the project, weighing out security risks and ensuring that sufficient security controls as well as audit controls are in place for operations on-going.
- Assist with assessing risk and providing technical guidance to closing off audit items in relation to the project deliverables.

3. Investigations, VM and Monitoring
- Initiates the Security Incident response process, engaging all required partners as required
- Partners with Enterprise Incident and Problem Management to ensure global compliance to Enterprise standards and process regarding major security incidents.
- Ensures that the team follows the Security Incident response process and related playbooks.
- Produces monthly reports on security and cyber related incidents, threat and attacks.
- Leads ongoing activities and initiatives to achieve effective operations, productivity and optimal business performance.
- Manages and delivers on special projects related to strategy, continual service improvement, relationship management, metrics, process documentation and tools.
- Ensure the successful execution of the penetration testing (ethical hacking) process.
- Tracks different indicator