Senior Information Security Advisor

2 weeks ago


Toronto, Canada Sun Life Full time

Job Description

:

Candidates must be eligible for Reliability Status Clearance, which requires that they have lived and worked in Canada for the past 5 consecutive years. No exceptions, please.  

Reporting to the Director, Security Advisory Services, the Senior Information Security Advisor will be aligned with one of Sun Life’s line of business. The Senior Information Security Advisor will manage the line of business portfolio including conducting Information Security Risk Assessments (ISRAs), performing contract reviews focused on security provisions, conducting supplier/third-party risk assessments, advising on security best practices, and reviewing emerging security strategies. The Senior Information Security Advisor will interact with various Sun Life internal teams including Business, Architecture, Infrastructure, Legal, Compliance and Risk, and Privacy teams, and external service providers.

What will you do?

The successful candidate will:

Provide support to Sun Life’s line of business initiatives and projects through conducting information security risk assessments, reviewing contracts to ensure inclusion of appropriate security requirements, performing supplier/third-party risk assessments, and advising on security best practices. Assess the line of business’ initiatives and projects to ensure implementation controls aligns with Sun Life Information Security policies and directives.  Provide security consulting to the line of business and various stakeholders, using technical expertise, to ensure necessary security controls are in place to safeguard and protect Sun Life confidential information, and improve overall security. Provide preliminary recommendations to business and management team on information security related risks. Provide regular Information Security updates to the assigned line of business’ IT management team including but not limited to status of current information security risk assessments, identified risks, penetration testing results, in-depth analysis of information security trends, and work completed. Track and manage open information security risks to ensure corresponding risk remediation plans and target dates are in place. Work with respective business and/or technology risk owner to ensure risk remediation. Provide support to Incident Management team during security incidents affecting the Sun Life’s line of business.

What will you need to succeed?

Minimum of at least 5 years experience in Information Security and/or Information Technology (IT) In-depth knowledge of information security and IT principles, protocols, practices, and industry standards Strong understanding of existing and emerging Information Security technologies such as encryption, firewall, IDS/IPS, anti-malware, DDoS, behavioural analysis, advanced malware detection, etc. Extensive knowledge of various attack/threat vectors and determining the security controls to minimize and/or remediate the risk Experience performing risk assessments of cloud-based (SaaS) technologies including but not limited to AWS and Azure Excellent communication (verbal and writing) skills Must be able to work and communicate with various business groups from a non-technical perspective and interpret technical context into plain language Familiarity with contract wording and interpretation of security clauses Self-starter, can work with minimum supervision, strategic thinker, negotiator, and consensus builder Post-secondary education (University degree or college diploma) in Computer Engineering, Computer Science, Information Technology, Information Security and Risk Management or comparable professional education/training in a field relevant to Information Security Professional designation relating to Information Security (e.g., CISSP, CCSP, CISM, CISA) preferred

What’s in it for you:

We’re honoured to be recognized as a 2024 Best Workplaces in Ontario by Great Place to Work® Canada. We’re proud to be recognized as a company with a 2023 Most Trusted Executive team by Great Place to Work® Canada. Wellness programs that support the three pillars of your health – mental, physical, and financial The opportunity to move along a variety of career paths with amazing networking potential.. As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office.

# LI – SJ



  • Toronto, Canada SPECTRAFORCE Full time

    Security Advisor 12 Contract - Extendable Remote- Toronto ON or Chicago IL Job Description Provides information security consulting services for Client overall and businesses/groups. Liaises with stakeholders to understand problems and opportunities and enables Client to meet its goals by understanding business vision, objectives and KPIs. Leads the...


  • Toronto, Canada Canadian Institute for Health Information Full time

    At CIHI, we recognize what matters to our employees. Some of the benefits of working at CIHI include HOOPP Pension Plan (Defined Benefits Pension) Retirement Planning Program Generous vacation days for permanent and long-term contracts Work-life balance Career Planning Program Learning and Professional Development Program Flexible benefits...


  • Toronto, ON, Canada Nexus Systems Group Inc. Full time

    Typical Day in Role: • Develop and execute a frameworks for risk and audit issues management, including the creation Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security design documents,...


  • Old Toronto, Canada Nexus Systems Group Inc. Full time

    Typical Day in Role: • Develop and execute a frameworks for risk and audit issues management, including the creation Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security design documents,...


  • Old Toronto, Canada Nexus Systems Group Inc. Full time

    Typical Day in Role: • Develop and execute a frameworks for risk and audit issues management, including the creation Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security design documents,...


  • Old Toronto, Canada Nexus Systems Group Inc. Full time

    Typical Day in Role: • Develop and execute a frameworks for risk and audit issues management, including the creation Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security design documents,...


  • Toronto, Canada First National Full time

    We are hiring a Senior Manager of GRC in our Information Security department! The Role: A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security, is responsible for ensuring the security, integrity, and availability of First National information assets. The candidate will contribute to the...


  • Toronto, Canada First National Financial Full time

    Working together to be our best! We are hiring a Compliance Analyst, Information Security! **Reporting To**: Senior Manager, GRC **Full-Time/Part - Time**: Full-time **Posting Date**: May 9, 2024 **Closing Date**: May 16, 2024 **Hours of Work**: 8:30 a.m. - 5:00 p.m. **Grade**: 8.4 **Office Location**: Toronto Great location! Steps away from the main public...


  • Toronto, ON, Canada First National Financial LP Full time

    Senior Manager of Security Architecture and Operations, Information Security Toronto, ON, Canada Job Description Posted Wednesday, March 6, 2024 at 5:00 AM | Expires Sunday, April 7, 2024 at 3:59 AM We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral...


  • Toronto, ON, Canada Toronto, ON, Canada Full time

    Senior Manager of Security Architecture and Operations, Information Security We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security is responsible for ensuring the security,...


  • Old Toronto, Canada First National Financial LP Full time

    Senior Manager of Security Architecture and Operations, Information Security Toronto, ON, Canada Job Description Posted Wednesday, March 6, 2024 at 5:00 AM | Expires Sunday, April 7, 2024 at 3:59 AM We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member...


  • Old Toronto, Canada Toronto, ON, Canada Full time

    Senior Manager of Security Architecture and Operations, Information Security We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security is responsible for ensuring the security,...


  • Old Toronto, Canada First National Financial LP Full time

    Senior Manager of Security Architecture and Operations, Information Security Toronto, ON, Canada Job Description Posted Wednesday, March 6, 2024 at 5:00 AM | Expires Sunday, April 7, 2024 at 3:59 AM We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member...


  • Old Toronto, Canada First National Financial LP Full time

    Senior Manager of Security Architecture and Operations, Information Security Toronto, ON, Canada Job Description Posted Wednesday, March 6, 2024 at 5:00 AM | Expires Sunday, April 7, 2024 at 3:59 AM We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member...


  • Old Toronto, Canada Toronto, ON, Canada Full time

    Senior Manager of Security Architecture and Operations, Information Security We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security is responsible for ensuring the security,...


  • Old Toronto, Canada Toronto, ON, Canada Full time

    Senior Manager of Security Architecture and Operations, Information Security We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security is responsible for ensuring the security,...


  • Toronto, Canada First National Full time

    We are hiring a Senior Manager of Security Architecture and Operations in our Information Security department! The Role: A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security is responsible for ensuring the security, integrity, and availability of First National information assets. The candidate...


  • Toronto, ON, Canada Arthur Grand Technologies Inc Full time

    Senior Cyber Security Specialist(NIST 800-53, ISO/IEC 27001, CIS) Arthur Grand Technologies Inc federal contracting opportunities, federal contracting, federal contracting companies, federal contracting for small business, federal contracting agencies, us federal contracting corp, federal contracting services, federal contracting... Arthur Grand...


  • Toronto, ON, Canada WSP USA Full time

    Position Summary WSP’s Information Security Office (ISO) is responsible for the deployment of the information security framework in to both the IT organization and wider business community. This includes the Governance mechanisms, policies and processes, tools and technologies, and employee training required to protect WSP information and that of our...


  • Old Toronto, Canada WSP USA Full time

    Position Summary WSP’s Information Security Office (ISO) is responsible for the deployment of the information security framework in to both the IT organization and wider business community. This includes the Governance mechanisms, policies and processes, tools and technologies, and employee training required to protect WSP information and that of our...