Information Security Advisor

at  Sun Life

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You’ll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you’ll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

UNIQUE REQUIREMENTS:

• The successful candidate is required to attain Canadian Reliability Security Clearance (administered by submitting fingerprints to the RCMP, who then conduct min. 5 year history checks).
• Please review the section 201 on the Federal Government site to verify if you are eligible for this clearance (https://www.tpsgc-pwgsc.gc.ca/esc-src/personnel/pdcf-rsrp-eng.html).

The successful candidate will:

• Provide support to Sun Life Business Group through conducting information security risk assessments, reviewing contracts to ensure inclusion of security requirements, performing supplier/third-party risk assessments, and advising on security best practices.
• Assess initiatives/projects to ensure implementation controls aligns with Sun Life Information Security policies and directive requirements.
• Provide security consulting to ensure appropriate security controls are in place to safeguard and protect Sun Life confidential information from intentional or accidental disclosure, modification, or destruction, and improve overall security.
• Provide reporting to management team on status of information security risk assessments, identified risks, and current work activities.
• Provide preliminary recommendations to the management team on information security related risks.
• Track and manage open information security risks to ensure corresponding risk remediation plans and target dates are in place. Work with respective business and/or technology risk owner to ensure risk remediation.