Cybersecurity Advisor

Aviva plc; Markham; Hybrid; CAD 80,000 - 105,000; Full time

Benefits offered by this job

Annual bonus

Retirement savings plan

Health benefits

Hybrid work model

Professional development

Job summary

Aviva Canada invites applications for a Cybersecurity Advisor role. You will support risk assessment, design and implementation of security controls, and partner with Risk & Compliance, Privacy, and IT to protect information assets.

The position emphasizes collaboration in a hybrid work environment and growth opportunities. You thrive in a dynamic, fast-paced setting, bringing 3–5 years of cybersecurity experience, strong communication, and the ability to translate technical risks for business

Qualifications

• 3–5 years in cybersecurity focusing on information security risk assessments and cloud security.
• Strong understanding of security standards, principles, and risk frameworks.
• Excellent communication skills for report writing and presenting to stakeholders.

Responsibilities

• Contribute to improvements in the Information Security Risk Management program.
• Conduct security assessments for projects of varying size and complexity.
• Provide guidance to stakeholders to manage risks and track actions.
• Review architecture documents and craft security assessment reports.
• Contribute to periodic metrics reporting for senior leadership.

Skills

Cybersecurity risk assessment

Security architecture

Cloud security

Stakeholder management

Regulatory awareness

Communication

Education

Degree in CS/CE/IT Security

Certifications in cybersecurity (CISSP/CISA/CISM/CCSP/CCSK/GIAC)

Job description

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence. At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most. We are looking for a positive and outstanding Cybersecurity Advisor. Aviva Canada’s Security Advisory Services is responsible for providing consulting and advisory services to business lines and IT teams to support sound cyber risk identification and management across the organization, controls are aligned with Aviva’s Cybersecurity standards and policies, while reducing cybersecurity risks to Aviva. The Cybersecurity Advisor provides support to business lines to ensure design, development and implementation of projects and initiatives are in accordance with Aviva’s Cybersecurity Standards, and that organizational cyber controls are followed. The role will facilitate the assessment of Cybersecurity risk for business functions to make informed decisions to protect information assets and systems. The incumbent will be a domain expert in the required areas of Cybersecurity. Support the Cybersecurity Managers in partner management by maintaining solid relationships with Risk & Compliance, Privacy, Supplier Assurance, IT Infrastructure and Operational Business Units. You thrive in a dynamic, innovative, and fast-paced environment.

This job advertisement is for an existing vacancy which has been posted both internally & externally.

Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position.

Aviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment.

If you require an accommodation during the interview or hiring process, please contact your Aviva Talent Acquisition Partner so that an appropriate accommodation can be arranged.

#LI-PS1 #LI-Hybrid

We help our 19.5 million customers to save for the future and manage the risks of everyday life. To give these customers the best possible products and service we know we must make Aviva the most attractive choice for talented, entrepreneurial people with diverse backgrounds and an evolving range of expertise and insight. So, we’re passionate about helping our 23,000 people to do the best work of their lives, to enable them to make a positive difference to the lives of our customers.

What you'll do

• Contribute to improvements in the Information Security Risk Management program to drive risk-based outcomes and ensure adherence to regulatory requirements.
• Conduct security assessments related to projects of various sizes and complexity and communicate results to internal and external partners, as well as senior leaders.
• Provide guidance to stakeholders to make informed decisions around managing risks and track such risks for action or closure.
• Review architecture documents and crafting security assessment documents and reports.
• Contribute to periodic reporting of metrics for senior leadership and partners.
• Build effective relationships with internal and external partners.
• Promote alignment to Aviva security standards and processes.
• Keep up to date with upcoming industry trends, technology developments, and regulatory changes.

What you'll bring

• 3 to 5 years’ experience in cybersecurity, focusing on information security risk assessments, application security design & architecture, as well as cloud-based solutions.
• Strong understanding of cybersecurity industry standards, principles, and practices, as well as risk concepts and frameworks.
• Outstanding communication skills including report writing and presenting to internal stakeholders and senior leaders, as well as external partners.
• Ability to understand complex business processes driving technical systems.
• Prior experience in leading a key line of business is an asset.
• Ability to interpret technical security risks and solutions to partners in business language.
• Demonstrated ability to work with diverse groups and to navigate through ambiguity.
• Ability to prioritize and deliver on multiple activities concurrently.
• Post-secondary education in Computer Science, Computer Engineering, IT Security, risk management, or comparable professional training.
• Professional designation relating to cybersecurity or IT risk (e.g., CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred.

What you’ll get

• The salary band for this position ranges from $80,000 to $105,000.
• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Outstanding Career Development opportunities.
• We’ll support your professional development education.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support our employees’ physical and mental health.
• Employee discount on home and auto insurance (where applicable).
• Hybrid flexible work model.