Senior Manager, Data Protection

Aviva; Markham; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A leading insurance company in York Region is hiring a Senior Manager for Data Protection to oversee encryption technologies and ensure robust data security. The ideal candidate will have significant Cybersecurity experience, particularly in Cryptography and DLP. This role involves leadership, collaborating with multiple teams, and developing data protection strategies to align with business objectives. The position offers a competitive rewards package and opportunities for professional development.

Benefits

Base compensation and annual bonus

Health benefits

Career Development opportunities

Competitive vacation package

Corporate wellness programs

Qualifications

• 5+ years’ experience in Cybersecurity, particularly Cryptography/DLP.
• 3+ years’ experience with KMS, HSMs and HashiCorp Vault.
• Experience with database activity monitoring and cloud security is advantageous.

Responsibilities

• Lead design and governance of cryptographic services.
• Manage deployment of Data Loss Prevention technologies.
• Oversee lifecycle of digital certificates and certificate management.

Skills

Cryptography

Data Loss Prevention (DLP)

Database Activity Monitoring (DAM)

Team leadership

Analytical thinking

Education

University Degree in Computer Science/Engineering

Tools

AWS

HashiCorp Vault

Job description

Overview

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

As the Senior Manager, Data Protection, you will be responsible for leading all aspects of Aviva Canada’s Data Protection technologies and processes encompassing delivery and BAU. Current focus will be on Cryptography, Secrets Management, Data Loss Prevention (DLP), Database Activity Monitoring (DAM), and Ransomware protection. That said, you will also be responsible for adding to the list of technologies and processes as you see fit – the roadmap and future state of Data Protection at Aviva Canada will be in your hands.

The Senior Manager, Data Protection will manage a dynamic team of Data Protection subject matter experts and supporting staff to help deploy, manage, and maintain our data protection and encryption technologies. This role is designed to work closely with Aviva’s Cybersecurity Operations team, Cybersecurity Risk and Governance teams, and other internal partners in IT Infrastructure and IT Risk.

Responsibilities

• Cryptography & Key Management: Lead the design, implementation, and governance of enterprise cryptographic services including KMS, HSMs, PKI, and secrets management. Ensure secure key lifecycle management and alignment with regulatory and compliance requirements. Collaborate with engineering and infrastructure teams to embed cryptographic controls into applications and platforms.
• Data Loss Prevention (DLP): Own the strategy, deployment, and ongoing management of DLP technologies across endpoints, networks, and cloud environments. Develop and enforce policies to prevent unauthorized data exfiltration and ensure compliance with data protection regulations. Monitor and respond to DLP alerts, working closely with incident response and legal teams.
• Certificate Management: Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and inventory tracking. Implement automation and monitoring tools to reduce certificate-related outages and vulnerabilities. Ensure alignment with internal standards and external compliance requirements (e.g., PCI-DSS, ISO 27001).
• Database Activity Monitoring (DAM): Oversee the deployment and management of DAM solutions to monitor and protect sensitive data within structured data stores. Ensure real-time visibility into database access, queries, and changes to detect anomalous or unauthorized activity. Work with data owners and DBAs to define policies and alerts that align with business and regulatory requirements. Integrate DAM with broader security operations and incident response workflows.
• Ransomware Protection: Lead the implementation and continuous improvement of ransomware protection technologies and processes. Collaborate with threat intelligence and incident response teams to detect, prevent, and respond to ransomware threats. Collaborate with infrastructure and application teams to ensure ransomware controls are embedded across on-premises and cloud environments.
• Leadership & Governance: Build and lead a high-performing team of data protection specialists. Develop and maintain metrics and reporting to demonstrate program effectiveness and risk reduction. Establish and maintain a robust control environment aligned with Aviva standards to ensure data protection policies, standards, and procedures are consistently applied and auditable across the organization. Partner with internal stakeholders (Legal, Risk, Compliance, IT) to align data protection strategies with business objectives.

Qualifications

• 5+ years’ experience working in a Cybersecurity role, mainly Cryptography and/or DLP
• 3+ years’ experience working with cryptography technologies such as KMS, HSMs and HashiCorp Vault, and other cryptography solutions
• Experience with Database activity monitoring (DAM) solutions, cloud (AWS), and mobile security platforms is an advantage
• University Degree in Computer Science/Engineering or have equivalent applicable experience
• An industry-recognized profession certification is desirable (e.g. CISSP, CCSP, CISA, etc.)
• Exhibits strong analytical and conceptual thinking, a desire to grow through continual career learning and professional development
• Ability to effectively lead, motivate, and grow a team of dedicated professionals
• Excellent written, verbal, and interpersonal skills

Benefits

• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Outstanding Career Development opportunities.
• We’ll support your professional development education.
• Competitive vacation package with the option to purchase 5 extra days off per year.
• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support our employees’ physical and mental health.
• Hybrid flexible work model.

Please note that we may use AI tools to help us through the recruitment process. This is an existing position which has been posted both internally & externally.

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.

#LI-PS1
#LI-Hybrid