You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights.

At Sun

Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Reporting to the Director, Security Advisory Services, the Information Security Advisor will assist business units with risk assessment and compliance matters as it relates to Information Security.

The Information Security Advisor will conduct information security risk assessments on initiatives, third-party suppliers/external vendors, applications, perform security contract reviews, advise on security best practices, and review emerging security strategies.

The Information Security

Advisor interacts with various Sun Life business groups and teams, including but not limited to, Business, Architecture, Infrastructure, Legal, Compliance and Risk, and Privacy teams.

Provide support to Sun Life Business Groups through conducting information security risk assessments, reviewing contracts to ensure inclusion of security requirements, performing supplier/third-party risk assessments, and advising on security best practices.

Assess initiatives/projects to ensure implementation controls align with Sun Life Information Security policies and directive requirements.

Provide security consulting to ensure appropriate security controls and security best practices are in place to safeguard and protect Sun Life confidential information from intentional or accidental disclosure,



modification, or destruction, and improve overall security.

Provide reporting to management team on status of information security risk assessments, identified risks, and current work activities.

Provide preliminary recommendations to the management team on information security related risks.

Track and manage open information security risks to ensure corresponding risk remediation plans and target dates are in place. Work with respective business and/or technology risk owner to ensure risk remediation.

University degree or college diploma in Computer Science, Engineering, Information Technology, Information Security and Risk Management or comparable skilled education/training in a field relevant to IT Security management

Minimum of at least 5 years experience in Information Security and Information Technology (IT)

In-depth knowledge of information security and IT principles, protocols, practices, and industry standards

Experience conducting information security risk assessments, including of cloud-based (SaaS) technologies, e.g. AWS and Azure

Strong understanding of existing and emerging information security technologies

Strong communication and negotiation skills with senior staff and executives

Excellent report writing skills

Familiarity with contract wording and interpretation of security clauses

Must be able to work and communicate with various business groups from a non-technical perspective and interpret technical context into common business language

Self-starter, can work with minimum supervision, strategic thinker, negotiator and consensus builder

Professional designation relating to Information Security, e.g., In addition to a law enforcement inquiry and a credit check, as part of your application, the Government of Canada will ask if you lived or travelled outside of Canada for 6-consecutive months during the last 5 years, and you must account for all activities during this time.

📌 Information Security Analyst - Remote (Toronto)
🏢 SunLife
📍 Toronto