Senior Manager, Security Products and Access Management - Markham, Canada - Allstate Canada

Description

Who is Allstate:

Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. The company is proud to have been named a Best Employer in Canada for nine consecutive years and prioritizes supporting employees and fostering an inclusive, welcoming corporate culture. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. Serving Canadians since 1953, Allstate strives to provide reassurance with its "You're in Good Hands" promise.

Through our Employee Value Proposition, Opportunity, Flexibility, Community, Diversity and Family, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do.

Role Designation: Hybrid

Benefits to joining Allstate

• Flexible Work Arrangements
• Employee discounts (15% on auto and property insurance, plus many other products and services)
• Good Office program (receive up to 400$ back after purchasing office equipment)
• Student Loan Payment Matching Program for Government Student loans
• Comprehensive Retirement Savings Program with employer matched contributions
• Annual Wellness allowance to support employees with improving health and wellbeing
• Personal reflection day
• Tuition Reimbursement
• Working within the community and giving back

Job description:

The Senior Manager, Security Products and Access Management is responsible for developing and maintaining the security technology products strategy, roadmap, design, implementation and maintenance within the Cybersecurity team. Acts as Allstate Insurance Company of Canada's (ACG) security technology champion, with accountability for day-to-day delivery of the Identity and Access Management services.

Accountabilities:

1. Security Products & Access Management - 20%

• Leads the design, engineering, and implementation of new security solutions / technologies (security product delivery).
• Reviews current security system security measures to recommend and implement enhancements.
• Oversees operations (e.g. support, maintenance, etc.) of existing security products, platforms, and technologies.
• Evaluates security technology and proofs-of-concept for service improvements, in-flight projects, and emerging technologies.
• Investigates, designs, and architects required cybersecurity controls as they are identified.
• Manages the user account provisioning and de-provisioning life cycle.
• Administers system access privileges.
• Develops and certifies new and existing systems, access validation reviews, and application on-boarding.
• Establishes performance metrics for the delivery of identity access management (IAM) services.
• Complies with legal and regulatory requirements (e.g. Sarbanes-Oxley (SOX), PCI DSS, PIPEDA , etc.).

2. Strategic Leadership – 20%

• Demonstrates holistic and in-depth business acumen of the enterprise, insurance, and protection industry and the ACG landscape.
• Creates and implements competitive and breakthrough technology strategies and contributes to the overall organization aligned with business goals and imperatives.
• Drives discussions with leadership teams and external stakeholders to conceptualize actions and initiatives, invest in business growth, build technology capabilities, introduce, or acquire new offerings, and move up the value chain of work.
• Partners with leadership teams to define, prioritize, and implement technology business goals.
• Breaks overall strategic technology goals down to quarterly, semi-annual, and annual milestones and cascades goals to team members.
• Owns and constantly reviews the organizational structure and capacity to align to current and future business technology strategies.
• Assumes the voice of the customer to ensure technology efforts and products are customer-centric.

3. Delivery Leadership – 20%

• Leverages technologies to create business value, improve business performance, enable business growth and scalability, enable superior customer and employee experiences, and improve operational efficiency and other strategic priorities while managing risk.
• Monitors and controls deviations to ensure delivery of planned goals that meet timelines.
• Reviews and adopts actions relating to monthly and quarterly forecasting, budgetary, operational, and employee performance metrics for teams and the entire span and cascades key updates and milestones to the team and key stakeholders.
• Resolves escalations and issues to facilitate achievement of organizational goals and imperatives.
• Negotiates complex or critical issues to arrive at cross-functional solutions.
• Identifies potential risks and develops and implements risk mitigation plans.
• Works closely with key stakeholders, business partners, and vendors to ensure the successful definition and execution of product line go-to-market and communications strategies.
• Ensures business continuity plans are in place and refreshed annually for all critical services provided by the team.

4. People Leadership – 20%

• Manages, enables, and grows high-performing teams that deliver customer-centric solutions and oversees the life cycle of multiple technical products.
• Develops workforce plans and proactively hires talent to meet resource needs.
• Manages team members to accomplish results through effective recruitment, selection, work allocation, goal-setting, coaching, mentorship, performance management, recognition, and employee engagement.
• Reviews and approves objective differentiation for performance and fair and strategic pay-for-performance, progression, and promotion.
• Builds a pool of fungible managers that can deliver on the organizational / unit strategy and creates succession plans for key and critical roles.
• Identifies, grooms, and retains top talent (e.g. domain experts, technical expertise, and potential leaders).

5. Systems / Process Innovation – 20%

• Encourages and sponsors technology innovation and invention with measurable outcomes.
• Explores ways to enhance the effectiveness of current systems and processes and benchmarks against industry practices.
• Owns and implements organizational process improvement initiatives.

Qualifications:

• Bachelor's Degree in Computer Science / Engineering, Business, a related discipline, or equivalent experience.
• Certification in security or technology/architecture such as CISSP, CISM, TOGAF, CRTSA, ISSAP, CNDA, etc.
• 10-15 years of broad information technology experience, of which 5+ years are in identity and access management (IAM) service delivery for a large organization.
• Expertise as a technologist with practical experience applying security best practices.
• Implementing and operating an enterprise security platform (e.g. Single Sign On solution, IAM, API gateway, etc.).
• Leading and managing large-scale enterprise IAM environment and service delivery (e.g. access management, privileged access management, recertification, governance, etc.).
• Developing enterprise security and technology strategies, roadmaps, and architecture across multiple businesses in a large organization.
• Directory services, single sign-on, and federation using related tools (e.g. SAML, OAuth, etc.)
• IAM management for cloud-based solutions.
• ​Familiarity with leading international security standards, such as; ISO27001/ ISO27002, or NIST
• Managing global teams and working in a global ecosystem.
• Management and leadership principles and techniques.
• Business acumen and data-driven decision-making skills.
• Interpersonal, oral, and written communication, presentation, and collaboration skills with tact and diplomacy.
• Analytical, strategic thinking, and problem-solving skills.
• Project management, organizational, prioritization, and time management skills.

Bonus qualification:

• Experience using the ServiceNow platform is an asset.
• ​Experience as a technology implementer, architect, and/or integrator in large organization would be an asset.
• Experience and training in specific technologies / platforms (e.g. SailPoint, CyberArk, SiteMinder, IBM DataPower, etc.) would be an asset.

Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.