Cybersecurity Advisor

Aviva; Markham; Hybrid; CAD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Advisor to enhance their Third Party Information Security Risk Management program. This role involves conducting risk assessments, guiding stakeholders, and ensuring compliance with regulatory requirements. The ideal candidate will have a strong background in cybersecurity, excellent communication skills, and the ability to navigate complex business processes. Join a forward-thinking company that values professional development and offers a compelling rewards package, including a hybrid work model and opportunities for career growth. If you're passionate about cybersecurity and making a difference, this is the perfect opportunity for you.

Benefits

Annual bonus eligibility

Retirement savings plan

Health benefits

Competitive vacation package

Professional development support

Corporate wellness programs

Volunteer opportunities

Qualifications

• 3-5 years of experience in cybersecurity focusing on risk assessments.
• Strong understanding of cybersecurity standards and risk concepts.

Responsibilities

• Improve Third Party Information Security Risk Management program.
• Conduct security assessments and communicate results effectively.
• Mentor analysts and build relationships with stakeholders.

Skills

Cybersecurity

Information Security Risk Assessments

Communication Skills

Risk Management

Problem Solving

Technical Understanding

Education

Post-secondary education in Computer Science

Professional designation in cybersecurity or IT risk

Job description

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

We are seeking an experienced Cybersecurity Advisor who has a strong understanding and experience in conducting information security risk assessments, particularly relating to third party risk.

Working closely with the Third Party Information Security Risk Assessment team, you will contribute to the improvement of the Third Party Information Security Risk Management program, as well as perform information security risk assessments to protect Aviva and its customers against cyber attacks.

You are comfortable partnering alongside various internal teams including IT, Legal, Risk, Supplier Assurance, Privacy, Data Governance, and Business to drive and improve the program.

You are resourceful, forward-thinking and thrive in a fast-paced environment.

What you'll do

• Contribute to improvements in Third Party Information Security Risk Management program to drive risk-based outcomes and ensure adherence to regulatory requirements.
• Conduct security assessments related to projects of various complexity and communicate results to internal and external partners.
• Provide guidance to stakeholders to make informed decisions around managing risks and track such risks for action or closure.
• Review third party contracts to ensure the appropriate security clauses are included.
• Contribute to periodic reporting of metrics for management and partners.
• Build effective relationships with internal and external partners.
• Provide mentorship to Analysts.
• Promote alignment to Aviva security standards and processes.
• Keep up to date with upcoming industry trends, technology developments, and regulatory changes.

What you'll bring

• 3 to 5 years’ experience in cybersecurity focusing on information security risk assessments, or application security design & architecture.
• Understanding of regulatory requirements in Canada and challenges facing third party risk management. Knowledge in the financial services or insurance industry is an asset.
• Strong understanding of cybersecurity industry standards, principles and practices, as well as risk concepts.
• Outstanding communication skills including report writing and presenting to internal and external partners.
• Ability to understand complex business processes driving technical systems. Prior experience in leading a key line of business is an asset.
• Ability to interpret technical security risks and solutions to partners in business language.
• Demonstrated ability to work with diverse groups and to navigate through ambiguity.
• Ability to prioritize and deliver on multiple activities concurrently.
• Post-secondary education in Computer Science, Computer Engineering, IT Security, risk management, or comparable professional training.
• Professional designation relating to cybersecurity or IT risk (e.g. CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred.

What you’ll get

• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Outstanding Career Development opportunities.
• We’ll support your professional development education.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support our employees’ physical and mental health.
• Hybrid flexible work model.

Please note that we may use AI tools to help us through the recruitment process. This is an existing position which has been posted both internally & externally.

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.