Analyst, Data Loss Prevention

Sun Life•Toronto, ON

8d•CA$65,000 - CA$105,000•Hybrid

About The Position

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful. When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives. Discover how you can make a difference in the lives of individuals, families and communities around the world. Location: Hybrid Reporting to the Director, Database Security, the Data Security Specialist will be responsible for defining and aligning strategies for data protection to ensure that exposures to data and cybersecurity threats are identified and managed at an acceptable level. The position is an integral part in the development and implementation of data protection programs across the enterprise. In this role you will regularly act as a voice of Information Security to clients and management, building cyber security confidence in support of business development and governance processes.

Requirements

Minimum of 5 years of experience in security or IT industry
Minimum of 3 years hands-on experience developing Data Protection / DLP policies and rules
Experience developing policies/rules for Endpoint & Network Prevent DLP and CASB
Advanced knowledge of organization, technology controls, security and risk issues
Experience with data discovery and designing discovery policies/rules
Working knowledge of cybersecurity policies and standards related to Data Protection
Hands-on experience with Data Protection/Security tools, e.g., Data Classification, AIP, Encryption
Experience with Firewalls/Web Proxies, Networking and Endpoint protection
Experience developing automation scripts, or a demonstrated aptitude for programming, is required (Python is preferred)
Excellent oral, written, and presentation communication skills

Nice To Haves

Bachelor of Science in Computer Science, System/Computer Engineering, Cyber-Security, or Information Security is preferred. Other degrees and relevant experience will be considered
Ability to work independently as well as in a global team environment, demonstrating creativity and an ability to check work conscientiously for errors and make decisions based on priorities, time constraints and risks
Experience writing professional documents both for internal and external purposes as well as being comfortable with presenting to senior leadership and often delivering a tough message
Knowledge or Experience with AWS, GCP, and Azure cloud services preferred

Responsibilities

Develop and maintain strong business and technology relationships, becoming a trusted partner to these groups
Investigate moderate to complex events and communicate to senior leadership
Identify risk and other security themes and develop recommendations for resolution
Ensure that anomalies are investigated and documented thoroughly and followed up as appropriate
Investigate and resolve systemic issues
Triage on Insider Threat cases
Escalate issues to senior management as warranted
Work at the forefront of designing innovative insider threat solutions