Senior Cybersecurity Advisor

Aviva; Markham; On-site; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Senior Cybersecurity Advisor to enhance its Cybersecurity Advisory Services. This role involves leading critical projects, assessing Cybersecurity risks, and collaborating with various business units to ensure compliance with Cybersecurity standards. You will play a pivotal role in fostering a secure environment while mentoring teams on best practices. If you are passionate about Cybersecurity and thrive in a dynamic and innovative atmosphere, this opportunity offers a compelling rewards package, outstanding career development, and a supportive work culture focused on diversity and inclusion.

Benefits

Annual bonus eligibility

Retirement savings plan

Health benefits

Competitive vacation package

Professional development support

Corporate wellness programs

Volunteer opportunities

Flexible work model

Qualifications

• 5+ years in Cybersecurity with lead experience in key areas.
• Knowledge of PCI Compliance and effective collaboration skills.

Responsibilities

• Lead projects ensuring Cybersecurity risks are mitigated.
• Collaborate with IT and business lines on security matters.

Skills

Cybersecurity Threat Risk Assessments

3rd Party Supplier Assurance

Penetration Testing

Access Management

Dev Ops

Cloud Solutions

Collaboration Skills

Knowledge of PCI Compliance

Education

Post-secondary education in Computer Science

Professional designation in cybersecurity or IT risk

Tools

Ariba

Archer GRC

Job description

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

Aviva Canada’s Security Advisory Services is responsible for providing advisory services to business lines and IT teams in maintaining risks and controls with Aviva Group Cybersecurity standards and policies and reducing operational risks to Aviva. The Senior Cybersecurity Advisor provides mentorship to business lines to ensure design, development and implementation of projects and initiatives are in accordance with Aviva’s Cybersecurity Standards. The role will assist in the assessment of Cybersecurity risk for business functions to make informed decisions to protect information assets.

The incumbent will be a domain expert in the required areas of Cybersecurity. Support the Cybersecurity Managers in partner management by maintaining solid relationships with Risk & Compliance, Privacy, Supplier Assurance, IT Infrastructure and Operational Business Units. You thrive in a dynamic, innovative, and fast-paced environment.

What you’ll do:

• Lead one or more of the key team responsibilities.
• Lead sophisticated projects providing security advice to ensure Cybersecurity risks are mitigated.
• Excel in reviewing architecture documents and crafting security assessment documents.
• You are passionate about new technologies and enjoy the challenges of implementing security controls to protect them.
• Work on various types of projects of different sizes from large complex to simple proficiently.
• Collaborate with various business lines and IT support functions.
• Promote awareness of Aviva’s Cybersecurity Standards and Policies.
• Provide the required support to management on matters related to Cybersecurity efficiently.
• Address daily requests from IT and business users on security-related matters and take ownership of the same to conclusion and satisfaction.

What you’ll bring:

• Minimum 5 years’ experience in Cybersecurity Threat Risk Assessments on new applications and systems being introduced in the environment as well as cloud-based solutions. You must have lead experience in at least one key area that the team is responsible for.
• 3rd Party Supplier Assurance and Risk Assessments experience including issue remediation.
• Leading the pen test program with external vendors and IT teams.
• Access Management reviews including Privileged access, processes, and tools.
• Experience related to Dev Ops, microservices, application migration to cloud, SAAS based solutions.
• Experience working in a Security or IT Audit team, IT Developer, System Administration or network experience is an asset.
• Demonstrated ability to establish effective working relationships and collaborative work approaches with both internal and external contacts.
• Knowledge of PCI Compliance requirements including Compliance Attestation process.
• Knowledge of Ariba, Archer GRC or equivalent platforms.
• Post-secondary education in Computer Science, Computer Engineering, IT security, risk management, or comparable professional training.
• Professional designation relating to cybersecurity or IT risk (e.g. CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred.

What you’ll get:

• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Outstanding Career Development opportunities.
• Support for your professional development education.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support our employees’ physical and mental health.
• Hybrid flexible work model.

Please note that we may use AI tools to help us through the recruitment process. This is an existing position which has been posted both internally & externally.

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.