Information Security Advisor

Sun Life; Toronto; Hybrid; CAD 65,000 - 105,000; Full time

Job summary

Sun Life is seeking an Information Security Advisor to support risk assessments across business units and review third-party security requirements. You will collaborate with Legal, Compliance, and Privacy teams to ensure security controls are aligned with Sun Life policies.

The role requires cloud security experience (AWS/Azure), strong communication with executives, and the ability to translate technical risk into business language.

Qualifications

• Bachelor's degree or higher in IT/Security or equivalent.
• Experience in information security risk assessments and cloud (SaaS) security.
• Strong written and verbal communication with senior stakeholders.

Responsibilities

• Conduct information security risk assessments for initiatives and third-party vendors.
• Review security clauses in contracts and advise on security controls.
• Provide security consulting to ensure appropriate controls are in place.
• Report on risk status and remediation plans to management.

Skills

Security risk management

Risk assessment

Security governance

Communication skills

Negotiation skills

Contract interpretation

Non-technical communication

Education

IT/Security degree or diploma

Security certification (nice to have)

Tools

AWS

Azure

Security contracts

Job description

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Reporting to the Director, Security Advisory Services, the Information Security Advisor will assist business units with risk assessment and compliance matters as it relates to Information Security.

The Information Security Advisor will conduct information security risk assessments on initiatives, third-party suppliers/external vendors, applications, perform security contract reviews, advise on security best practices, and review emerging security strategies. The Information Security Advisor interacts with various Sun Life business groups and teams, including but not limited to, Business, Architecture, Infrastructure, Legal, Compliance and Risk, and Privacy teams.

What will you do?

• Provide support to Sun Life Business Groups through conducting information security risk assessments, reviewing contracts to ensure inclusion of security requirements, performing supplier/third-party risk assessments, and advising on security best practices.
• Assess initiatives/projects to ensure implementation controls align with Sun Life Information Security policies and directive requirements.
• Provide security consulting to ensure appropriate security controls and security best practices are in place to safeguard and protect Sun Life confidential information from intentional or accidental disclosure, modification, or destruction, and improve overall security.
• Provide reporting to management team on status of information security risk assessments, identified risks, and current work activities.
• Provide preliminary recommendations to the management team on information security related risks.
• Track and manage open information security risks to ensure corresponding risk remediation plans and target dates are in place. Work with respective business and/or technology risk owner to ensure risk remediation.

What do you need to succeed?

• University degree or college diploma in Computer Science, Engineering, Information Technology, Information Security and Risk Management or comparable professional education/training in a field relevant to IT Security management
• Minimum of at least 5 years experience in Information Security and Information Technology (IT)
• In-depth knowledge of information security and IT principles, protocols, practices, and industry standards
• Experience conducting information security risk assessments, including of cloud-based (SaaS) technologies, e.g. AWS and Azure
• Strong understanding of existing and emerging information security technologies
• Strong communication and negotiation skills with senior staff and executives
• Excellent report writing skills
• Familiarity with contract wording and interpretation of security clauses
• Must be able to work and communicate with various business groups from a non-technical perspective and interpret technical context into common business language
• Self-starter, can work with minimum supervision, strategic thinker, negotiator and consensus builder
• Ability to work with diverse groups
• Professional designation relating to Information Security, e.g., CISSP, CCSP, CISM, CISA (nice to have)

Unique Requirements:

• This role requires Reliability Status Clearance. In addition to a law enforcement inquiry and a credit check, as part of your application, the Government of Canada will ask if you lived or travelled outside of Canada for 6-consecutive months during the last 5 years, and you must account for all activities during this time. Important: Obtaining Reliability Status Clearance within a reasonable amount of time is a condition required to start employment for this role at Sun Life.

What’s in it for you?

• We’re honoured to be recognized as a 2026 Best Workplaces in Canada by Great Place to Work® Canada.
• We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health.
• Wellness programs that support the three pillars of your health – mental, physical, and financial
• The opportunity to move along a variety of career paths with amazing networking potential.
• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [e-mail].

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

65,000/65 000 - 105,000/105 000

Job Category:

IT - Technology Services

Posting End Date:

26/08/2026