AVP, Threat and Vulnerability Management
Listed on 2026-02-19
-
IT/Tech
Cybersecurity, Security Manager, Information Security, IT Consultant
You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.
Discover how you can make a difference in the lives of individuals, families and communities around the world.
As the AVP, Global Threat & Vulnerability Management (TVM) within Digital Security Threat Management (DSTM) under Security, Risk & Crisis Management (SRC), you will lead Sun Life’s global capability for identifying, assessing, prioritizing, and mitigating cyber vulnerabilities and threats across the enterprise. You will oversee multiple sub‑disciplines—vulnerability management, red teaming, threat intelligence, defensive security (blue team), application security platform & testing, and incident management & process development—ensuring Sun Life maintains a resilient and compliant security posture.
This role partners closely with Security Engineering & Advisory, Technology Risk & Compliance, Security Governance & Client Programs, Security Initiatives & Awareness, and Security Operations to drive measurable improvements in cyber resilience and reduce enterprise attack surface.
You are the Responsible Person/Contact for the enterprise Vulnerability Management Directive, overseeing the entire vulnerability lifecycle across Sun Life: identification, prioritization, reporting, remediation governance, and compliance monitoring.
Oversee the Cyber Threat Intelligence (CTI) and Cyber Threat Hunting (CTH) function responsible for collection, analysis, and operationalization of threat intelligence; monitor global threats; identify indicators of compromise and attacker behaviors; produce actionable threat briefings; maintain relationships with intelligence-sharing communities and partners; ensure threat intelligence informs detection engineering, vulnerability prioritization, and offensive testing; perform continuous Threat Hunting; develop and refine use cases with Security Operations and Engineering teams.
Lead the Offensive Security (Red Team) program, conducting application, network, social engineering, and physical penetration tests; adversary emulation; intelligence-led penetration testing; validate remediation effectiveness and align with threat intelligence.
Lead the Defensive Security (Blue Team) program; respond to detections; evolve capabilities based on threat intelligence and testing results; partner with Offensive Security, CTI and Security Operations to enhance detection coverage, reduce dwell time, and improve alert fidelity.
Lead the Security Incident team; respond to security incidents; govern maturity of incident response processes, playbooks and readiness exercises; ensure high-quality incident handling with clear communication and post‑incident reviews.
Oversee application security scanning capabilities (static, dynamic, software composition and mobile analysis); partner with Dev Ops to integrate security into pipelines; drive remediation strategies and provide secure development guidance; ensure findings feed into enterprise vulnerability reporting.
Lead Sun Life’s Application Security Testing function; own strategy and execution of the enterprise testing framework; ensure annual penetration testing for critical applications; drive high-quality, repeatable results and adoption of advanced testing approaches.
Collaboration:
Partner with Security Engineering & Advisory, Technology Risk & Compliance, Security Governance & Client Programs, Security Initiatives & Awareness, and Security Operations to align…
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search: