Director, Security Advisory Services

About the role

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world. Job Description: Role Summary: The Director of Security Advisory Services oversees the delivery of the Information Security advisory program and corresponding services within Sun Life. This leader leads a team of highly skilled professionals whose mandate is to consult across Enterprise Services as well as internal Business Units to ensure that the security risk reviews are conducted across the Enterprise. In addition, the role will assist with the development and implementation of critical IT Security programs, procedures, capabilities and services within Sun Life, and plan and execute enterprise-level IT Security requirements including. The Director of Security Advisory Services has frequent interaction with the Enterprise Services Leadership Team, peers within Enterprise Services, internal and external customers including other Sun Life technology teams (e.g. Application Services, Architecture, Enterprise Infrastructure, and Shared Business Services), HR, Legal, Compliance; IT service providers and key vendors in the delivery of security services. What will you do? Global responsibility for the Security Advisory function Conduct information security risk reviews on all initiatives, both new and legacy, to ensure that the Sun Life environment is protected against threats to the confidentiality, integrity, and availability of its key business operations, applications, and infrastructure Manage exceptions to Security Directives including risk analysis, compensating controls and executive sign-off Provide security consulting services to internal Business Units and DBTS Sets direction for security related technologies or other controls that need to be put into place to reduce future risk/reliability. Involves the development and delivery of white papers, strategy papers on technology which will involve research on an on-going basis Act as prime point of contact for technical security issues and perform relationship manager role within DBTS and Business Unit Teams Participate and be critical contributor in the delivery of the Information Security strategic plan as it pertains to the Sun Life, ensuring alignment with business initiatives Facilitate effective partnerships and alliances with key stakeholders Participate in establishing and communicating relevant best practice scenarios relating to Information Security practices Communicate difficult or complex security ideas and areas of risk clearly and concisely to internal and external clients Manage staff development, performance management and employee motivation and leadership Actively participate and provide leadership, advice, support and partnering with AS and DBTS leadership teams Provide subject matter expertise enabling management to adequately protect against internal and external threats and in accordance with industry accepted standards and relevant legislation Lead Security Advisory services to deliver consistent, KPI-driven risk assessments and advisory outcomes across the enterprise, ensuring effective risk identification, governance, and executive decisioning. Drive measurable improvements in risk posture and service delivery through strong stakeholder partnership, data-driven reporting, and continuous process optimization. What do you need to succeed? Minimum 7-10 years IT/Information, preferably with experience in multiple areas. Extensive knowledge of IT Security principles, protocols, practices and industry standards. Solid understanding of existing and emerging IT Security technologies. Strong in all areas of communication, able to interface and negotiate with senior staff. A strong understanding of the Sun Life culture and ability to work with diverse groups. Good technology generalist, with a good understanding of all aspects of IT especially architecture. Strong consulting skills, and ability to create a win - win outcome. Must be able to work with businesses on a business perspective and interpret technical context into common business understandings. Self-starter, strategic thinker, negotiator and consensus builder. Education and Experience: University degree or college diploma in Computer Science, Engineering, or comparable professional education/training in a field relevant to IT Security management and risk management. Minimum of 10 years of relevant experience with a corporate or government IT security department within an