Description
As the Senior Manager of Security Advisory Services (SAS), you will lead all aspects of Aviva Canada's Security Advisory Services functions. This involves leading a team to conduct Information Security Risk Assessments (ISRAs) for internal solutions and technology projects, as well as Third Party Information Security Assessments (TPISAs) to review third-party security posture and contractual obligations.
You will ensure that cybersecurity risk at Aviva is managed appropriately and within risk tolerance levels. You will also collaborate with other Aviva security and IT teams to implement new security solutions that will strengthen Aviva's overall security posture.
Key responsibilities include:
- Leading a team of Security Risk Advisors and Security Analysts to conduct ISRAs, TPISAs, and manage cybersecurity risks
- Providing oversight on assessments, risk identification, and risk management processes and tools
- Driving Aviva's Information Risk Management Process to continuously assess key assets, subsidiaries, and suppliers' security posture
- Identifying opportunities for improvement in existing processes and technology
- Assisting in the development of cybersecurity risk reporting, including Key Risk Indicators (KRIs)
- Providing leadership, mentoring, growth, and development opportunities to team members
You will also:
- Develop and adapt the overall cybersecurity risk advisory vision for Aviva Canada
- Provide senior management and executives with information security trends and risk status updates
- Increase visibility of cybersecurity risks where necessary
- Manage penetration testing compliance attestation programs
- Prepare for internal Risks and Control Assessments
Requirements:
- Minimum 10 years' progressive experience in cybersecurity risk management, vendor assessments, and application security design & architecture
- Strong understanding of cybersecurity industry standards, principles, and practices
- Proven management and leadership skills
- Demonstrated ability to communicate complex issues clearly and concisely
- Ability to navigate ambiguity and guide teams through change
- Knowledge of IBM OpenPages, Archer GRC, Ariba, LogicGate, or equivalent platforms
- Post-secondary education in Computer Science, Computer Engineering, IT security, risk management, or comparable professional training
- Professional designation relating to cybersecurity or IT risk (e.g., CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred
What you'll get:
- Salary band: $130,000 to $170,000
- Compelling rewards package, including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, and more
- Outstanding career development opportunities
- Competitive vacation package with the option to purchase extra days off
- Employee-driven programs focused on diversity and inclusion
- Corporate wellness programs
- Employee discount on home and auto insurance
- Hybrid flexible work model