Senior Manager, Security Advisory Services

Job summary

The Senior Manager will lead the Security Advisory Services team in conducting information security risk assessments and managing cybersecurity risks for internal and third-party solutions. They will also drive the information risk management process, mentor team members, and provide strategic security insights to executive leadership.

Job details

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence. At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most. As the Senior Manager of Security Advisory Services (SAS), you will be responsible for leading all aspects of Aviva Canada’s Security Advisory Services functions. This will primarily involve leading the SAS team who will conduct Information Security Risk Assessments (ISRAs) for internal solutions, technology projects; and Third Party Information Security Assessments (TPISA) to review our third parties’ security posture and contractual obligations to protect Aviva. The Senior Manager will run a dynamic team to identify and manage cybersecurity risks, policy exception requests, and a wide-range of cybersecurity consulting requests for Aviva’s technology and business teams. You will ensure that cybersecurity risk at Aviva is managed appropriately and within risk tolerance levels as defined by the organization. At the same time, you will ensure the smooth day-to-day operations of managing cybersecurity risks and advisory functions. Additionally, you will also collaborate with other Aviva security and IT teams to implement new security solutions that will strengthen Aviva’s overall security posture. You are resourceful, forward-thinking, collaborative, and are comfortable in a fast-paced environment. What you'll do You will lead a team of Security Risk Advisors and Security Analysts to conduct ISRAs, TPISAs, manage and mitigate cybersecurity risks and conduct and other consulting requests within Aviva Canada’s technology and business teams Provide oversight on assessments, risk identification and risk management, processes, and tools for managing and reporting risks, and improve the quality of services Drive Aviva’s Information Risk Management Process to continuously assess Aviva Canada’s key assets, subsidiaries and suppliers security posture Identify opportunities for improvement in existing processes and technology and develop enhancements overall Assist in the development of cybersecurity risk reporting including the ongoing development and improvement of Key Risk Indicators (KRIs) Provide leadership, mentoring, growth, and development opportunities to team members. Ensure all identified cybersecurity risks are mitigated and are effectively communicated to partners, and managed with risk-prioritized timelines aligned with Aviva’s risk appetite Provide oversight to a wide variety of security solutions, projects, and new technologies Other key responsibilities include: Develop and adapt the overall cybersecurity risk advisory vision for Aviva Canada as cybersecurity risk and threat-landscape industry changes Provide senior management and executives with information security trends, the status of identified risks, and the effectiveness of work activities Increase visibility of cybersecurity risks where and when appropriate with the respective collaborators when risk action plan target dates are not met Manage the penetration testing compliance attestation programs Preparing for internal Risks and Control Assessments What you'll bring Minimum 10 years’ of progressive experience in cybersecurity risk management, vendor assessments, and application security design & architecture Strong understanding of cybersecurity industry standards, principles and practices, as well as risk concepts Proven management and leadership skills in communication, prioritization and developing talent Demonstrated ability to communicate complex issues in a clear and concise manner to a wide range of audiences and stakeholders Demonstrated ability to navigate through ambiguity and guide team through changes Ability to understand complex processes and make sound judgement calls. Ability to negotiate and influence others to achieve optimal results. Knowledge of IBM OpenPages, Archer GRC, Ariba, LogicGate or equivalent platforms. Post-secondary education in Computer Science, Computer Engineering, IT security, risk management, or comparable professional training. Professional designation relating to cybersecurity or IT risk (e.g. CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred. What you’ll get The salary band for this position ranges from $130,000 to $170,000. Please note that individual salary is determined by factors such as job-related knowledge, skills and experience, as well as internal equity. Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities. Outstanding Career Development opportunities. We’ll support your professional development education. Competitive vacation package with the option to purchase 5 extra days off per year. Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion. Corporate wellness programs to support our employees’ physical and mental health. Employee discount on home and auto insurance (where applicable). Hybrid flexible work model. This job advertisement is for an existing vacancy which has been posted both internally & externally. Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position. Aviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment. If you require an accommodation during the interview or hiring process, please contact your Aviva Talent Acquisition Partner so that an appropriate accommodation can be arranged. #LI-PS1 #LI-Hybrid

What you’ll do

The Senior Manager will lead the Security Advisory Services team in conducting information security risk assessments and managing cybersecurity risks for internal and third-party solutions. They will also drive the information risk management process, mentor team members, and provide strategic security insights to executive leadership.

Requirements

Candidates must have a minimum of 10 years of progressive experience in cybersecurity risk management, vendor assessments, and application security design. A post-secondary degree in a relevant field and professional certifications such as CISSP, CISA, or CISM are preferred.

Benefits

• Annual bonus
• Retirement savings
• Share plan
• Health benefits
• Personal wellness
• Volunteer opportunities
• Career development
• Vacation package
• Gender and diversity programs
• Corporate wellness programs
• Employee discount on home and auto insurance

Listed skills

• Leadership · Preferred
• Communication · Preferred
• Negotiation · Preferred
• Project management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cybersecurity risk management
• Vendor assessments
• Application security
• Risk identification
• Information security risk assessments
• Third party information security assessments
• Leadership
• Mentoring
• Communication
• Negotiation
• Strategic planning
• Cybersecurity consulting
• Risk reporting
• Policy management
• Project management
• Certified Information System Auditor (CISA)
• Cyber Security Management
• Influencing Skills
• RSA Archer
• Resourcefulness
• Industry Standards
• Certified Cloud Security Professional (CCSP)
• Security Solutions
• IT Security
• Cybersecurity Risk Management
• Cyber Risk
• Security Risk
• Artificial Intelligence
• Penetration Testing
• Application Security
• Mental Health
• Management
• Certificate Of Cloud Security Knowledge
• Certified Information Systems Security Professional
• Certified Information Security Manager
• Computer Science
• Computer Engineering
• Consulting
• Cyber Security
• Disabilities
• GIAC Certifications
• IT Risk Management
• Key Risk Indicator
• Risk Aversion
• Risk Management
• Mentorship
• Operations
• Risk Analysis
• Risk Appetite
• SAS (Software)

Job areas

• Security & Safety
• Management & Leadership
• Technology
• Consulting
• Data & Analytics
• Advisory Services Manager
• Cyber Security Manager / Administrator
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

More jobs from Aviva