Cybersecurity Advisor

Aviva Canada's Security Advisory Services is seeking a Cybersecurity Advisor to provide consulting and advisory services to business lines and IT teams. The goal is to support sound cyber risk identification and management across the organization, aligning controls with Aviva's Cybersecurity standards and policies, and reducing cybersecurity risks.

The Cybersecurity Advisor will:

• Contribute to improvements in the Information Security Risk Management program to drive risk-based outcomes and ensure adherence to regulatory requirements.
• Conduct security assessments related to projects of various sizes and complexity and communicate results to internal and external partners, as well as senior leaders.
• Provide guidance to stakeholders to make informed decisions around managing risks and track such risks for action or closure.
• Review architecture documents and craft security assessment documents and reports.
• Contribute to periodic reporting of metrics for senior leadership and partners.
• Build effective relationships with internal and external partners.
• Promote alignment to Aviva security standards and processes.
• Keep up to date with upcoming industry trends, technology developments, and regulatory changes.

The ideal candidate will have:

• 3 to 5 years' experience in cybersecurity, focusing on information security risk assessments, application security design & architecture, as well as cloud-based solutions.
• Strong understanding of cybersecurity industry standards, principles, and practices, as well as risk concepts and frameworks.
• Outstanding communication skills including report writing and presenting to internal stakeholders and senior leaders, as well as external partners.
• Ability to understand complex business processes driving technical systems.
• Prior experience in leading a key line of business is an asset.
• Ability to interpret technical security risks and solutions to partners in business language.
• Demonstrated ability to work with diverse groups and to navigate through ambiguity.
• Ability to prioritize and deliver on multiple activities concurrently.
• Post-secondary education in Computer Science, Computer Engineering, IT Security, risk management, or comparable professional training.
• Professional designation relating to cybersecurity or IT risk (e.g., CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred.

In return, you will receive:

• A salary ranging from $80,000 to $105,000.
• A compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Outstanding Career Development opportunities.
• Support for your professional development education.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee-driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support employees' physical and mental health.
• Employee discount on home and auto insurance (where applicable).
• Hybrid flexible work model.