Information Security Analyst

at  Sun Life

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You’ll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you’ll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

JOB DESCRIPTION:

Candidates must be eligible for Reliability Status Clearance, which requires that they have lived and worked in Canada for the past 5 consecutive years. No exceptions, please.
You believe life is about aiming high and making an impact. At Sun Life Financial, we work together, share common values and help each other grow and achieve goals.
The Information Security Analyst reports to the Director - Security Advisory Services and will be responsible for supporting Senior Information Security Advisors within the team in their day-to-day duties. Support work will include but is not limited to analysis of security documentation/questionnaires from both vendor and internal teams, following up with initiative stakeholders (internal/external), analysis and presentation of raw data/metrics, review of legal agreements from an information security perspective, and escalating identified security concerns to senior team members.

PREFERRED SKILLS:

• Strong communication and negotiation skills with senior staff and executives
• Familiarity with contract wording and interpretation of security clauses
• Must be able to work and communicate with various business groups from a non-technical perspective and interpret technical context into plain language.
• Can work with minimum supervision, proactive, strategic and analytic thinker, and consensus builder.
• Experience performing risk assessments of cloud-based (SaaS) technologies including but not limited to AWS and Azure.

• Assist Senior Information Security Advisors in performing information security risk assessments. This work would include:
• Assess the security posture and security controls of a vendor.
• Drafting risk reports which summarize the information security assessment including any risks to the organization.
• Following up with stakeholders to clarify and validate information related to initiatives.
• Provide security consulting services to Enterprise Services and Business Units
• Provide information security related input into technology vendor selection (RFP); and
• Once the required experience and aptitude has been shown, expectation will be that the Information Security Analyst will start to perform these tasks independently with minimal supervision.