Information Security Advisor conducting cyber-risk assessments and contract reviews for Sun Life, a global financial-services company.
Advising business and technology teams on security controls, compliance, and risk remediation.
Responsibilities
Conduct information security risk assessments for initiatives, projects, applications, cloud-based SaaS technologies, and third-party suppliers/external vendors
Review contracts to ensure inclusion of security requirements and interpret security clauses
Advise business groups on information security best practices and appropriate security controls
Assess initiatives and projects against Sun Life Information Security policies and directive requirements
Provide security consulting to protect confidential information from disclosure, modification, or destruction
Report assessment status, identified risks, and current work activities to management
Provide preliminary recommendations on information security-related risks
Track open information security risks and ensure remediation plans and target dates are established
Work with business and technology risk owners to achieve risk remediation
Collaborate with Business, Architecture, Infrastructure, Legal, Compliance and Risk, and Privacy teams
Requirements
University degree or college diploma in Computer Science, Engineering, Information Technology, Information Security and Risk Management, or comparable professional education/training relevant to IT Security management
Minimum 5 years of experience in Information Security and Information Technology
In-depth knowledge of information security and IT principles, protocols, practices, and industry standards
Experience conducting information security risk assessments, including cloud-based SaaS technologies such as AWS and Azure
Strong understanding of existing and emerging information security technologies
Strong communication and negotiation skills with senior staff and executives
Excellent report writing skills
Familiarity with contract wording and interpretation of security clauses
Ability to communicate with diverse business groups from a non-technical perspective and translate technical context into common business language
Ability to work with minimum supervision; strategic thinking, negotiation, and consensus-building abilities
Ability to work with diverse groups
Reliability Status Clearance required before starting employment
Government of Canada law enforcement inquiry and credit check
Must account for activities during any period lived or travelled outside Canada for 6 consecutive months during the last 5 years
Professional designation relating to Information Security, such as CISSP, CCSP, CISM, or CISA, is nice to have
Benefits
Wellness programs supporting mental, physical, and financial health
Variety of career paths with networking potential
Choice and flexibility to work from home or in the office based on business and Client needs
Incentive plans for eligible employees, subject to individual and company performance
Inclusive and supportive work environment
Accommodation in the application process for persons with disabilities
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.
Consultant cybersécurité hybride à Montréal chez I - TRACING, pure - player indépendant en sécurité informatique. Conception, déploiement et support de solutions IAM, réseau, systèmes et applications.
Desjardins property technician supporting fire prevention, building safety, management, and build - out projects. Providing technical support, process coordination, user training, and operational guidance.