Director, Security Advisory Services

Sun Life • Toronto, ON

21h • CA$125,000 - CA$195,000 • Hybrid

About The Position

The Director of Security Advisory Services oversees the delivery of the Information Security advisory program and corresponding services within Sun Life. This leader leads a team of highly skilled professionals whose mandate is to consult across Enterprise Services as well as internal Business Units to ensure that the security risk reviews are conducted across the Enterprise. In addition, the role will assist with the development and implementation of critical IT Security programs, procedures, capabilities and services within Sun Life, and plan and execute enterprise-level IT Security requirements. The Director of Security Advisory Services has frequent interaction with the Enterprise Services Leadership Team, peers within Enterprise Services, internal and external customers including other Sun Life technology teams (e.g. Application Services, Architecture, Enterprise Infrastructure, and Shared Business Services), HR, Legal, Compliance; IT service providers and key vendors in the delivery of security services.

Requirements

• Minimum 7-10 years IT/Information, preferably with experience in multiple areas.
• Extensive knowledge of IT Security principles, protocols, practices and industry standards.
• Solid understanding of existing and emerging IT Security technologies.
• Strong in all areas of communication, able to interface and negotiate with senior staff.
• A strong understanding of the Sun Life culture and ability to work with diverse groups.
• Good technology generalist, with a good understanding of all aspects of IT especially architecture.
• Strong consulting skills, and ability to create a win - win outcome.
• Must be able to work with businesses on a business perspective and interpret technical context into common business understandings.
• Self-starter, strategic thinker, negotiator and consensus builder.
• University degree or college diploma in Computer Science, Engineering, or comparable professional education/training in a field relevant to IT Security management and risk management.
• Minimum of 10 years of relevant experience with a corporate or government IT security department within an organization of comparable size and complexity to SLF.

Nice To Haves

• Professional designation in IT security management (such as CISM, CISSP, CISA) preferred.

Responsibilities

• Global responsibility for the Security Advisory function
• Conduct information security risk reviews on all initiatives, both new and legacy, to ensure that the Sun Life environment is protected against threats to the confidentiality, integrity, and availability of its key business operations, applications, and infrastructure
• Manage exceptions to Security Directives including risk analysis, compensating controls and executive sign-off
• Provide security consulting services to internal Business Units and DBTS
• Sets direction for security related technologies or other controls that need to be put into place to reduce future risk/reliability. Involves the development and delivery of white papers, strategy papers on technology which will involve research on an on-going basis
• Act as prime point of contact for technical security issues and perform relationship manager role within DBTS and Business Unit Teams
• Participate and be critical contributor in the delivery of the Information Security strategic plan as it pertains to the Sun Life, ensuring alignment with business initiatives
• Facilitate effective partnerships and alliances with key stakeholders
• Participate in establishing and communicating relevant best practice scenarios relating to Information Security practices
• Communicate difficult or complex security ideas and areas of risk clearly and concisely to internal and external clients
• Manage staff development, performance management and employee motivation and leadership
• Actively participate and provide leadership, advice, support and partnering with AS and DBTS leadership teams
• Provide subject matter expertise enabling management to adequately protect against internal and external threats and in accordance with industry accepted standards and relevant legislation
• Lead Security Advisory services to deliver consistent, KPI-driven risk assessments and advisory outcomes across the enterprise, ensuring effective risk identification, governance, and executive decisioning.
• Drive measurable improvements in risk posture and service delivery through strong stakeholder partnership, data-driven reporting, and continuous process optimization.

Benefits

• A competitive salary and bonus program, based on market scale
• A flexible group insurance program starting on your first day of work to meet your needs and those of your family.
• Time off that allows you to focus on the moments that matter most.
• 20 vacation days per year.
• Our Share Ownership Program gives you the opportunity to invest in Sun Life while benefiting from employer matching contributions.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: Associate degree