IT Risk & Controls Partner (Information Security)

Aviva plc; Toronto; Hybrid; CAD 80,000 - 120,000; Full time

Job summary

Aviva plc is seeking a forward-thinking IT Risk and Controls Partner in Toronto to manage cyber and information security risks. This role involves conducting risk assessments, monitoring risk profiles, and ensuring effective communication with senior leadership, contributing to Aviva's strong risk culture. The ideal candidate will possess significant experience in the IT realm, excellent analytical skills, and a commitment to building lasting relationships across various management layers.

Benefits

Compelling rewards package including base compensation

Eligibility for annual bonus

Health benefits

Competive vacation package

Corporate wellness programs

Qualifications

• 5+ years of experience in IT Operations and Cyber Risk Management.
• Excellent communication and relationship-building skills.
• Strong strategic and critical thinking abilities.

Responsibilities

• Deliver oversight of risk management related to Cyber and Information Security.
• Perform Risk and Control assessments and manage risk events.
• Monitor IT risk profile and report on vulnerabilities.

Skills

Communication

Analytical Skills

Interpersonal Skills

Critical Thinking

Education

Professional certifications (CRISC, CISA, CISSP, CISM)

Tools

GRC risk management tools

Job description

Apply locations Toronto Markham posted on Posted Yesterday job requisition id R-151751

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

We are looking for a positive and forward-thinking IT Risk and Controls Partner specializing in Cyber and Information Security. The ideal candidate will have outstanding collaboration and interpersonal skills, good communication and expertise knowledge and experience.

This role will report directly into the Head of Technology Strategic Initiatives, Risk and Operations and will be a key role within IT’s first line risk and control team and critical to ensuring a strong risk culture across the department.

What you’ll do

• You will deliver efficient, effective and timely first line oversight of risk management related to Cyber and information security risks of which Aviva Canada is exposed. This includes activities required by Aviva Canada’s operational risk and control methodology, for example :
• Performing Risk and Control assessments
• Managing risk events and issues, facilitating root cause analysis of incidents and quantifying impact of loss events
• Monitoring the IT risk profile, KRIs and associated metrics of Aviva Canada’s cyber and information security risks to proactively identify changes in the risk profile and emerging risks
• Support in depth analysis on inherent and residual risk faced by Aviva Canada in relation to Cyber and Data loss risks
• Monitor and report the status of management’s IT risk response plans
• Ensuring our GRC tool ‘iCare’ is reliable and up to date
• Reporting on identified IT and cyber-security vulnerabilities with language that senior leaders can understand and use
• Develop and manage relationships with technology / CISO partners; this includes Aviva Canada and Aviva Group second and third lines of defense, Aviva Canada’s other first line risk and control teams.
• Periodically analyze relevant risk data (internal and external) to identify common themes, patterns and / or trends at an aggregate level.
• Act as an SME on cyber and information security to support Aviva Canada’s technology and business transformation projects where required.
• Support the identification and reporting submissions for Aviva Canada of regulatory surveys and remain up to date on new developments and emerging risks.

What you’ll bring

• 5+ years of experience within IT Operations, IT System Development Life Cycle, IT and / or Cyber Risk Management, Governance and / or Audit.
• Effective communication, listening, presentation, and facilitation skills.
• Effective interpersonal, leadership, and relationship-building skills in engaging with various levels of management.
• Ability to analyze complex data sets, identify trends and communicate actionable conclusions
• Strong strategic and critical thinking skills.
• Experience using GRC risk management tools.
• Professional certifications and member of associations such as CRISC, CISA, CISSP, CISM etc. are an asset.

What you’ll get

• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support our employees’ physical and mental health.
• Hybrid flexible work model.

Please note that we may use AI tools to help us through the recruitment process. This is an existing position which has been posted both internally & externally.

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.

About Us

We help our 19.5 million customers to save for the future and manage the risks of everyday life. To give these customers the best possible products and service we know we must make Aviva the most attractive choice for talented, entrepreneurial people with diverse backgrounds and an evolving range of expertise and insight.

So, we’re passionate about helping our 23,000 people to do the best work of their lives, to enable them to make a positive difference to the lives of our customers.

J-18808-Ljbffr

Create a job alert for this search

Information Security • Toronto, ON, Canada