Business Group CISO: Strategic Cyber Risk Leader

Sun Life Financial; Hong Kong; On-site; HKD 2,000,000 - 2,800,000; Full time

Benefits offered by this job

5-day work week

MPF

Group life insurance

Group medical insurance

Career development opportunities

Job summary

Sun Life Financial in Hong Kong seeks a visionary Vice-President, Business Group Information Security Officer (BG CISO) to lead security strategy for the Business Group and challenge cyber risk across the enterprise. You will bridge business and security, elevate risk governance, and shape multi-year security investments.

You will influence executives, oversee third-party cyber risk, and ensure regulatory compliance while enabling secure technology adoption and resilience across global business

Qualifications

• University degree in Information Security, Computer Science, Technology, Risk Management, or related discipline.
• CISSP, CISM, CRISC, CGEIT or equivalent certifications preferred.
• 15+ years of progressive experience in cybersecurity and risk management.
• Experience advising senior global executives on technology and cyber risk matters.

Responsibilities

• Advise senior business leaders on cyber risk, resilience and security strategy.
• Lead security governance activities and ensure regulatory alignment.
• Oversee security integration for major transformations and M&A.
• Collaborate with enterprise security and business groups to align priorities.
• Present cyber risk posture and emerging threats to executive forums and boards.
• Drive risk-informed investments and resource allocation across the Business Group.

Skills

Executive leadership

Stakeholder management

Cybersecurity

Risk management

Strategic decision-making

Communication skills

Education

University degree in Information Security / CS

Job description

Sun Life Financial in Hong Kong seeks a visionary Vice-President, Business Group Information Security Officer (BG CISO) to lead security strategy for the Business Group and challenge cyber risk across the enterprise. You will bridge business and security, elevate risk governance, and shape multi-year security investments.

You will influence executives, oversee third-party cyber risk, and ensure regulatory compliance while enabling secure technology adoption and resilience across global business