Security Governance Analyst

Sun Life Financial; Toronto; On-site; CAD 63,000 - 104,000; Full time

Job summary

Sun Life Financial is seeking a Security Governance Analyst to enhance their security framework and manage risks. This role involves supporting audits, conducting policy reviews, and collaborating with peers in Information Security. The ideal candidate will possess strong communication skills and a comprehensive understanding of security principles, ensuring that governance and security assurance activities are addressed effectively.

Benefits

Flexible Benefits

Inclusive and respectful environment

Career path opportunities

Recognition as a Best Workplace

Qualifications

• Strong communication skills and ability to interface with colleagues.
• Knowledge of Information Security principles and industry standards.
• Advanced security knowledge/certifications such as CISSP, CISM, CISA.

Responsibilities

• Support security assurance review activities and audits.
• Conduct annual policy reviews and present changes to management.
• Provide reporting and analytics on information security assurance activities.

Skills

Leadership

Communication

Teamwork

Organizational skills

Strategic thinking

Education

University degree or college diploma in Computer Science

Professional education/training in information security management

Tools

ServiceNow

Jira

Job description

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

The Security Governance Analyst is a key member of the Security Governance team who will work with enterprise business, risk, compliance, corporate and IT partners across Sun Life. The Analyst will contribute to day-to-day security governance and risk management activities, including support for annual security framework assessments, internal/external audits/regulatory examinations, compliance and issue reporting, internal policy and directive reviews, policy non-compliance reviews and responses to regional regulatory inquiries.

The ideal candidate will demonstrate strong leadership, communication, teamwork and organizational skills and maintain strong working relationships with enterprise partners to ensure governance and security assurance activities are conducted in an informed, professional and timely manner.

What will you do?

• Support security assurance review activities, including for annual NIST and CSA Cybersecurity Maturity Assessments.

• Conduct annual security risk policy and directive review/refresh activities and present changes to Management.

• Support facilitation activities for internal audits/external regulatory examinations. Report open issue status and track closure.

• Assist in producing timely responses to Information Security regulatory questionnaires and RFIs.

• Keep abreast of common security frameworks and related security best practices.

• Provide reporting and analytics to the management team outlining the status of information security assurance activities and contributing to other reporting as necessary.

• Collaborate with peers in Information Security for continuous improvement to Sun Life’s security posture, including process improvement and automation.

What do you need to succeed?

• Strong communication skills, able to interface and collaborate with colleagues and leadership.

• Knowledge of Information Security principles, protocols, practices, industry standards and data related regulations (e.g., OSFI B-13, NIST CSF, CSA CMM, ISO 27001-02, HIPAA, NYDFS Part 500, HK GL20, SOC Trust Principles)

• Advanced security knowledge/certifications (e.g., CISSP, CISM, CISA, CIAM).

• Willingness to undertake information security related training, where appropriate.

• Advanced skills in PowerPoint, Excel, report writing, communications and project management practices.

• Strong understanding of existing GRC and project management tools (e.g., ServiceNow, Jira) as well as current and emerging IT Security technologies

• An understanding of Sun Life's Businesses and ability to work with diverse groups.

• Self- Starter, strategic thinker, negotiator and consensus builder

• Excellent facilitation and coordination skills and ability to influence a win - win outcome.

• University degree or college diploma in Computer Science, engineering, information security management, information technology management, risk management, or comparable professional education/training in a relevant field

What's in it for you?

• The opportunity to move along a variety of career paths with amazing networking potential

• Flexible Benefits from the day you join to meet the needs of you and your family

• We’re committed to creating an inclusive and respectful environment. Our goal is to make sure all ouremployees have the chance to live up to their full potential

• We’re honoured to be recognized as a 2023 Best Workplaces in Ontario by Great Place to Work Canada

• We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health

*LI-MS

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process or those needing job postings in an alternative format may e-mail a request to [e-mail] .

At Sun Life we strive to create a flexible work environment where our employees are empowered to do their best work. Several flexible work options are available and can be discussed throughout the selection process depending on the role requirements and individual needs.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

63,000/63 000 - 104,000/104 000

Job Category:

IT - Technology Services

Posting End Date:

07/06/2025