Posted in

Information Security Analyst

Information Security Analyst

CompanySun Life
LocationNorth York, ON, Canada, Kitchener, ON, Canada
Salary$53300 – $88200
TypeFull-Time
DegreesBachelor’s
Experience LevelMid Level

Requirements

  • Minimum of at least 2 years experience in Information Technology (IT) and/or Information Security
  • Knowledge of IT and information security principles, protocols, practices, and industry standards
  • Experience performing risk assessments of cloud-based (SaaS) technologies including but not limited to AWS and Azure
  • Understanding of existing and emerging IT and security technologies
  • Strong communication and negotiation skills with senior staff and executives
  • Excellent report writing skills
  • Familiarity with contract wording and interpretation of security clauses
  • Must be able to work and communicate with various business groups from a non-technical perspective and interpret technical context into plain language
  • Can work with minimum supervision, proactive, strategic and analytic thinker, and consensus builder
  • University Degree

Responsibilities

  • Provide support to Sun Life’s business group initiatives and projects through conducting information security risk assessments, reviewing contracts to ensure inclusion of security requirements, performing supplier/third-party risk assessments, and advising on security best practices
  • Provide support to the business group to ensure the security controls implemented on their projects and initiatives align with Sun Life Security Policy and Directive requirements
  • Provide security consulting to Sun Life business group to ensure adequate security controls are in place to safeguard and protect Sun Life confidential information and improve overall security
  • Provide preliminary recommendations on information security related risks
  • Track and manage open information security risks to ensure corresponding risk remediation plans and target dates are in place. Work with respective business and/or technology risk owner to ensure risk remediation
  • Provide management with an in-depth analysis of status of identified risks, current work activities, and work completed by the team.

Preferred Qualifications

    No preferred qualifications provided.