Senior Manager, Security Advisory Services

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence. At Aviva Canada, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported.

We’re not just about insurance; we’re about making a real difference by protecting what matters most.
As the Senior Manager of Security Advisory Services (SAS), you will be responsible for leading all aspects of Aviva Canada’s Security Advisory Services functions. This will primarily involve leading the SAS team who will conduct Information Security Risk Assessments (ISRAs) for internal solutions, technology projects; and Third Party Information Security Assessments (TPISA) to review our third parties’ security posture and contractual obligations to protect Aviva.
What you'll do   You will lead a team of Security Risk Advisors and Security Analysts to conduct ISRAs, TPISAs, manage and mitigate cybersecurity risks and conduct and other consulting requests within Aviva Canada’s technology and business teams
Provide oversight on assessments, risk identification and risk management, processes, and tools for managing and reporting risks, and improve the quality of services
Drive Aviva’s Information Risk Management Process to continuously assess Aviva Canada’s key assets, subsidiaries and suppliers security posture
Identify opportunities for improvement in existing processes and technology and develop enhancements overall
Assist in the development of cybersecurity risk reporting including the ongoing development and improvement of Key Risk Indicators (KRIs)
Provide leadership, mentoring, growth, and development opportunities to team members
Ensure all identified cybersecurity risks are mitigated and are effectively communicated to partners, and managed with risk-prioritized timelines aligned with Aviva’s risk appetite
Provide oversight to a wide variety of security solutions, projects, and new technologies
Other key responsibilities include:
Develop and adapt the overall cybersecurity risk advisory vision for Aviva Canada as cybersecurity risk and threat-landscape industry changes
Provide senior management and executives with information security trends, the status of identified risks, and the effectiveness of work activities
Increase visibility of cybersecurity risks where and when appropriate with the respective collaborators when risk action plan target dates are not met
Manage the penetration testing compliance attestation programs
Preparing for internal Risks and Control Assessments
What you’ll bring   Minimum 10 years’ of progressive experience in cybersecurity risk management, vendor assessments, and application security design & architecture
Strong understanding of cybersecurity industry standards, principles and practices, as well as risk concepts
Proven management and leadership skills in communication, prioritization and developing talent
Demonstrated ability to communicate complex issues in a clear and concise manner to a wide range of audiences and stakeholders
Demonstrated ability to navigate through ambiguity and guide team through changes
Ability to understand complex processes and make sound judgement calls
Ability to negotiate and influence others to achieve optimal results
Knowledge of IBM Open Pages, Archer GRC, Ariba, Logic Gate or equivalent platforms
Post-secondary education in Computer Science, Computer Engineering, IT security, risk management, or comparable professional training
Professional designation relating to cybersecurity or IT risk (e.g. CISSP, CISA, CISM, CCSP/CCSK, GIAC) preferred
What you’ll get  …