Information Security Lead – Vulnerability Management

Job title: Information Security Lead – Vulnerability Management

Job description: Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

We are currently seeking a hardworking vulnerability management lead whose primary role is to manage and operate information security’s vulnerability management program, work with peers in different decision centers in order to remediate vulnerabilities, present the findings and help others in remediation activities. This position is critical to the success of the organization by providing understanding of attack surface of Aviva’s infrastructure.

Responsibilities include planning and prioritizing vulnerability scanning activities, coordinate remediation efforts. The role involves taking ownership of vulnerability management activities like – scanning, triaging, prioritization and streamlining the vulnerability management process with timely remediation. This role requires to report the maturity of scanning and vulnerability findings to different partners. Finally, they will be required to ramp up and build out a practice to be balanced.

The role is part of Aviva’s Canada information security operations team.

The incumbent will have extensive experience with Information Technology and expert level knowledge of Information Security principles as well as basic project-management skills, high communications skills.

If 2020 has shown us anything, it’s that insurance is ripe for disruption. There’s no better time to stake your claim in transforming an entire industry – and the way customers engage with our products and services – than now. As consumers increasingly expect more choices, we’re on a mission to make getting insurance simpler and cheaper.

As we look to invest over $100 million in redesigning the way we do business, it’s not lost on us that IT is at the heart of everything we do. That’s why ensuring we have the most advance technologies and that we keep bringing in the brightest and best tech talent, is of the utmost importance. Join a team that’s not only doing security patches and upgrades, but also looking at how we can be more streamlined. Delivering forward-thinking service. Supporting our people. All of which means you can expect fantastic exposure to lots of different teams. Interesting, diverse projects. And huge scope to use your creativity. Our products and services could be shaped by you.

Our remit is broad, spanning the highly technical to more project-focused work. You could be tackling business system change projects or infrastructure and architecture plans. Developing new technology. Or providing top-notch IT support to our customers.

Architects, Technical Leads, Delivery Leads, Project Managers, Scrum Masters, Software Engineers, Cloud Engineers, DevOps Engineers and Security Analysts are just some of the people who make technical things happen here. For all our roles, we look for creative and strategic problem solvers. People who want to influence how our products and services develop, and who can help us keep our driven edge. We’re global too. Passionate about digital innovation. So we’re always exploring new technologies – and new possibilities. This is an exciting, inventive and forward-thinking place to be.

Ready to keep driving us forward?

What you’ll do

• Manage and Operate information security’s vulnerability management program in an effective manner, to reduce operational risks
• Lead information security’s vulnerability management program to meet program’s SLA’s and KPI’s
• Work on vulnerability management process with ability to identify and improve efficiency in operations.
• Identify gaps and support action plans to strengthen Vulnerability Management control effectiveness
• Partner with multiple teams across the organization and 3rd party service provider to map, track, monitor and communicate progress on vulnerability remediation activities.
• Provide technical guidance to peers in both IT and information security on vulnerability remediation.
• Provide the required support to senior management on matters related to vulnerability management program.
• Anticipate and plan for future risk in meeting vulnerability SLA’s
• Lead the execution of information security projects and track performance status
• Coordinate and communicate with internal partners across the IT department.
• Ensure all Vulnerability Management related controls are demonstrable and sustainable on a continuous basis.
• Ability to adapt in a fast-paced environment.

What you’ll bring

• College Diploma or University Degree.
• Insurance industry specific background would be an asset.
• A background in information security operations and threat and vulnerability management

Experience

• At least 8 years’ experience working in an enterprise IT environment
• Demonstrated ability to establish effective working relationships and collaborative work approaches with both internal and external peers.
• Active information security certification, such as CISCP, OSCP, etc.
• Strong technical skills, knowledge of network protocols and network communication principles, understanding of vulnerabilities and remediation techniques. Create procedures and customized scan configurations appropriate for the desired performance and accuracy.
• Experience reviewing, analyzing, discussing, explaining, and reporting vulnerability scan results
• Strong interpersonal skills, ability to work on multiple projects simultaneously in controlled matter.
• Excellent communications skills including preparing briefings, presentations, and oral status reports
• Possess strong analytical skills and problem-solving capabilities
• Experience with Qualys, Tenable or any other vulnerability management solution.

Knowledge, skills & abilities

Integrity:

• Demonstrates commitment to Aviva and its customers.
• Takes personal responsibility for words and actions.
• Maintains consistency between words and actions.
• Acts in compliance with department, company, and industry standards. Holds self and others accountable.
• Demonstrates drive to excel.
• Exhibits mature self-confidence.

Progressiveness:

• Exhibits customer service orientation.
• Demonstrates flexibility and change.
• Demonstrates analytical thinking.
• Demonstrates conceptual thinking.

Teamwork:

• Exhibits teamwork and collaboration.
• Communicates effectively.

What you’ll get

• Competitive rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Exceptional Career Development opportunities.
• We’ll support your professional development education.

Additional Information: Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.

Company: Aviva

Expected salary:

Location: Markham, ON

Job date: Thu, 03 Jun 2021 05:50:50 GMT