Information Security Engineer

Job Description

Role & responsibilities Analysis of external vendor questionnaire s to assess the security posture and security controls of a vendor Drafting risk reports which summarize the information security assessment including any risks to the organization. Following up with internal and external (vendor) stakeholders to clarify and validate information related to initiatives Review legal agreements w ith vendors from an information security perspective. Provide security consulting services to Enterprise Services and Business Units. Once the required experience and aptitude has been shown, expectation will be that the Information Security Analyst will start to perform these tasks independently with minimal supervision. Competencies: Bachelor's Degree preferably in Computer Science or related streams Strong verbal communication - able to communicate complex and technical issues in plain English. Advanced writing skills with emphasis on report writing. Strong analytical/problem solving abilities. Strong understanding of existing and emerging Information Security technologies. Strong consulting skills and ability to influence a win - win outcome. Self-starter, strategic thinker, negotiator, and consensus builder. Ability to understand Sun Life's diverse business units and ability to work with diverse groups. Nice to have - Sound knowledge of technologies related to Information Security: encryption, firewalls, intrusion detection/prevention, anti-virus, DDoS, behavioral analysis/advanced malware detection.