AVP,Advanced Security Analytics and Automation Job Toronto area,Old Toronto Ontario Canada,IT/Tech

Location: Old Toronto

Job Description

Position Summary

Sun Life is seeking a highly experienced and strategic leader to establish and direct a centralized function that addresses emerging and intersecting threats related to Cyber Security and Fraud. This newly created role will lead Information Security's data and forensic capabilities, transforming disparate security and transactional data into actionable intelligence that protects the organization's digital assets, financial integrity, and customer trust.

This position will establish a unified defense shield that enables proactive detection of fraud, internal/external threats, and risk mitigation through data, analytics, and Machine Learning (ML) / Artificial Intelligence (AI), directly impacting the bottom line by minimizing financial losses and reducing mean-time-to-detect and mean-time-to-respond metrics.

Key Responsibilities:

Strategy Execution & Vision

Translate the overall Advanced Analytics, SIEM, and Account Take Over (ATO) / Fraud strategy into executable roadmaps and operational plans aligned with enterprise business goals

Establish and operate an Operating Model supporting identification of security and fraud incidents with continuous feedback loops for faster detections

Champion a multilayered functional and system architecture providing investigative and forensic insights in real-time environments

Drive innovative thinking to add value through comprehensive understanding of fraud, internal/external threats, risk mitigation, and security incident management

Create long-term plans to carry out functional and cross-functional objectives, developing budgets for multiple departments and forecasting organizational needs

Analytics & Technology Leadership

Define the strategic roadmap for advanced security analytics, focusing on ML model deployment for anomalous and malicious activity detection, User and Entity Behavior Analytics (UEBA), and predictive risk scoring

Ensure stability, performance, and log source coverage of the SIEM platform, including data ingestion pipeline management and cost-optimization initiatives

Manage reliability, completeness, and cost-effectiveness of log ingestion, prioritizing data quality and normalization

Integrate planning of advanced analytics with various security and business fraud teams to deliver proactive and near real-time intelligence

Strategize scalable platforms and integrate advanced analytics (AI/ML) into detection pipelines

Operational Excellence

Establish and operate a best-in-class Global Fusion Center delivering peak efficiency with low Mean-Time-to-Detect (MTTD) and Mean-Time-to-Respond (MTTR)

Integrate intelligence across cyber security, fraud, financial crime, third-party risk, insider threat, and geopolitical risk

Own proactive identification processes and conduct regular tabletop exercises and post-mortem analysis for continuous refinement

Ensure streamlined processes across security and business fraud teams for proactive detection and loss reduction

Maintain operational and capital budgets for all associated programs, ensuring optimal resource allocation for maximum ROI

Fraud Prevention & Risk Mitigation

Integrate security and advanced analytics capabilities into enterprise-wide fraud prevention processes

Shift focus toward near real-time detection of account takeover (ATO) and fraud

Oversee performance and tuning of fraud detection models ( ML / AI ) for internal and external actors

Provide oversight to identify new data sources and features that improve fraud catch rates without impacting legitimate customer transactions

Directly mitigate risks including external cyber threats, financial frauds, insider threats, revenue loss, and fragmented reporting

Team Management & Development

Directly lead, manage, and mentor leads of the Advanced Analytics, SIEM Engineering, and Global Fusion Center teams

Foster a culture of continuous improvement, innovation, and cross-functional collaboration

Develop enterprise leadership talent with expertise in Advanced Analytics, SIEM management, and Global Fusion Center operations

Manage day-to-day work using digital enterprise agile methodology with agile teams

Stakeholder & Vendor Management

Serve as central liaison for key internal stakeholders across Markets, Business Units (Canada GB, GRS, Advisors), Corporate Fraud Risk Management, HR, Security Risk and Crisis Management, Digital, DBTS, Risk, Legal, and Compliance

Manage communications with senior leadership and executive management, creating win-win scenarios and gaining consensus while maintaining relationships

Deliver formal presentations to various committees, stakeholders, and executives

Prepare executive-level reports and documents

Establish and maintain strategic relationships with key vendors to identify opportunities, innovate, and reach cost-effective solutions

Required Qualifications:

Education & Experience

University degree and professional designation with over 10 years of experience, or an equivalent combination of education and experience

Expert knowledge in…


Increase/decrease your Search Radius (miles)



Job Posting Language

AVP, Advanced Security Analytics and Automation