Hybrid Cybersecurity Advisor - Risk & Security Strategy

Aviva plc; Markham; On-site; CAD 80,000 - 105,000; Full time

Benefits offered by this job

Annual bonus

Retirement savings plan

Health benefits

Hybrid work model

Professional development

Job summary

Aviva Canada invites applications for a Cybersecurity Advisor role. You will support risk assessment, design and implementation of security controls, and partner with Risk & Compliance, Privacy, and IT to protect information assets.

The position emphasizes collaboration in a hybrid work environment and growth opportunities. You thrive in a dynamic, fast-paced setting, bringing 3–5 years of cybersecurity experience, strong communication, and the ability to translate technical risks for business

Qualifications

• 3–5 years in cybersecurity focusing on information security risk assessments and cloud security.
• Strong understanding of security standards, principles, and risk frameworks.
• Excellent communication skills for report writing and presenting to stakeholders.

Responsibilities

• Contribute to improvements in the Information Security Risk Management program.
• Conduct security assessments for projects of varying size and complexity.
• Provide guidance to stakeholders to manage risks and track actions.
• Review architecture documents and craft security assessment reports.
• Contribute to periodic metrics reporting for senior leadership.

Skills

Cybersecurity risk assessment

Security architecture

Cloud security

Stakeholder management

Regulatory awareness

Communication

Education

Degree in CS/CE/IT Security

Certifications in cybersecurity (CISSP/CISA/CISM/CCSP/CCSK/GIAC)

Job description

Aviva Canada invites applications for a Cybersecurity Advisor role. You will support risk assessment, design and implementation of security controls, and partner with Risk & Compliance, Privacy, and IT to protect information assets.

The position emphasizes collaboration in a hybrid work environment and growth opportunities. You thrive in a dynamic, fast-paced setting, bringing 3–5 years of cybersecurity experience, strong communication, and the ability to translate technical risks for business