IT Risk & Controls Partner (Information Security)

Aviva Canada; Markham; Hybrid; CAD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a proactive IT Risk & Controls Partner specializing in Cyber and Information Security. This role, crucial to fostering a strong risk culture, involves overseeing risk management, performing assessments, and reporting on vulnerabilities. The ideal candidate will bring over 5 years of experience in IT operations and cyber risk management, along with strong communication and leadership skills. This innovative firm offers a hybrid work model, generous vacation policies, and a comprehensive rewards package, making it an exciting opportunity for professionals looking to make a significant impact.

Benefits

Salary

Bonus

Retirement Plans

Health Benefits

Wellness Programs

Career Development Opportunities

Generous Vacation Policy

Diversity and Inclusion Programs

Qualifications

• 5+ years in IT Operations, Cyber Risk Management, Governance, or Audit.
• Strong communication and leadership skills required.

Responsibilities

• Oversee risk management related to Cyber and Information Security.
• Report on cybersecurity vulnerabilities to senior leaders.

Skills

IT Operations

Cyber Risk Management

Governance

Audit

Data Analysis

Strategic Thinking

Communication Skills

Leadership Skills

Education

Certifications (CRISC, CISA, CISSP, CISM)

Tools

GRC tools

Job description

Join to apply for the IT Risk & Controls Partner (Information Security) role at Aviva Canada

Individually we are people, but together we are Aviva. Our Values are Care, Commitment, Community, and Confidence.

We seek a positive, forward-thinking IT Risk and Controls Partner specializing in Cyber and Information Security. The ideal candidate will have excellent collaboration, interpersonal skills, and relevant expertise.

This role reports to the Head of Technology Strategic Initiatives, Risk and Operations, and is crucial within IT’s first line risk and control team to foster a strong risk culture.

What You’ll Do

1. Oversee risk management related to Cyber and Information Security, including:
   • Performing Risk and Control assessments
   • Managing risk events, root cause analysis, impact quantification
   • Monitoring risk profile, KRIs, and emerging risks
   • Analyzing inherent and residual risks
   • Reporting on risk response plans
   • Maintaining the GRC tool ‘iCare’
2. Report on cybersecurity vulnerabilities in understandable language for senior leaders.
3. Build relationships with technology and CISO partners, including internal and external teams.
4. Analyze risk data to identify trends and patterns.
5. Serve as an SME on cyber and information security for projects.
6. Support regulatory reporting and stay updated on emerging risks.

What You’ll Bring

• 5+ years in IT Operations, Cyber Risk Management, Governance, or Audit.
• Strong communication, presentation, and facilitation skills.
• Interpersonal, leadership, and relationship-building abilities.
• Data analysis skills to identify trends and draw conclusions.
• Strategic and critical thinking skills.
• Experience with GRC tools.
• Certifications like CRISC, CISA, CISSP, CISM are assets.

What You’ll Get

• Rewards package including salary, bonus, retirement plans, health benefits, and wellness programs.
• Career development opportunities and professional support.
• Generous vacation policy with options to purchase extra days.
• Inclusive programs supporting diversity and inclusion.
• Hybrid work model.

Note: AI tools may assist in recruitment. Accommodations are available for employees with disabilities. Contact your Talent Acquisition Partner for support.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industry: Insurance