Information Security Analyst 4

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Information Security Specialist will be responsible for managing the different aspects of information security including infrastructure and application security , providing security consulting services and acting as the subject matter expert (SME) to assigned lines of business within Sun Life.  As part of these responsibilities, the Information Security Manager will interact on a regular basis with Asia Information Security team, different stakeholders of Sun Life business groups, Enterprise Services, and external vendors and various internal departments for managing the information security.

Responsibilities:

· Represent local Information Security in Asia InfoSec Council

· First information security point of contact for local project teams on new project initiatives

· Coordination and implementation for project tasks for Global InfoSec initiatives.

· Security incident coordination and investigation for Philippine incidents.

· Gathering of information to support audit and compliance.

· Ensuring user compliance to corporate security directives especially on operations.

· Able to present to leadership

· Evaluate implementation of security products for network architecture, work method and procedures to make environment more effective and to strengthen security measures

· Review solutions, recommendations, and risk documentations to minimize risk of implementation of recommended products, applications and infrastructure.

· Participates as the Information Security representative in the Sun Life IT Architecture and similar reviews for business groups to ensure required security controls are present in systems, applications, and processes

· Align with business requirement, help business achieve objectives while ensuring information security risk is managed to an acceptance level within risk appetite.

· Participate in cyber security awareness, engaging with different stakeholders, functions to deliver sustainable cyber security solutions.

· Ensure adherence to global compliance and internal controls

· Manage and coordinate the security risks identified from information security risk assessments and bring them to closure:

· Provides security consulting services to the Philippines location of the, and peers within Enterprise Services:

o   Provides support to Sun Life business group by suggesting ways to improve security by implementing security controls

o   Provide support in technical security reviews of network, vendor solution, web applications, mobile applications, cloud infrastructure, API security etc.

Technical Specifications/Competencies:

· In depth knowledge of security concepts such as cyber-attack, threat vectors, risk assessments, risk management , networking protocols, technologies and standards such as MPLS, VPN, SSL, SSO, Oauth, Federated Authentication mechanism, data classification and protection, Advanced threat protection mechanisms, IAM, SIEM, API authentication, OWASP,ISO 27001, NIST etc, Sound understanding of Cloud Architecture and Solutions  

Job Category:

Posting End Date: