Business Group Cyber Risk Leader & Security Strategist

Sun Life; Hong Kong; On-site; HKD 1,800,000 - 3,200,000; Full time

Benefits offered by this job

5-day work week

MPF

Group life insurance

Group medical insurance

Career development opportunities

Job summary

Sun Life Hong Kong is seeking a senior executive to lead the Business Group Information Security Officer function. The role partners with Business Group leadership to define and drive cyber risk strategy, resilience, and security outcomes across the business.

You will guide risk governance, security programs, and regulatory compliance while shaping multi-year security investments in a dynamic financial services environment. A proven track record advising senior leaders is essential.

Qualifications

• University degree in Information Security, Computer Science, Technology, Risk Management, or a related discipline.
• Relevant security certifications preferred (CISSP, CISM, CRISC, CGEIT, or equivalent).

Responsibilities

• Serve as the primary Security advisor to the Business Group executive team and Business Group President.
• Define and drive the Business Group security strategy, aligned to enterprise security priorities and business objectives.
• Ensure security considerations are integrated into business strategy, transformation initiatives, digital strategies, and operational decision-making.
• Report significant changes in risk to appropriate levels of leadership on a periodic and event-driven basis.
• Exercise independent challenge and elevate material cyber, technology, resilience and security risks through appropriate governance forums when risk exposure exceeds established risk appetite or remediation commitments are not achieved.
• Deliver timely insights and data to enable informed executive decision-making, prioritization, and risk-based trade-offs.
• Influence and shape multi-year security, resilience, and technology risk investment strategies, ensuring resource allocation aligns with business priorities, regulatory expectations and evolving threat landscapes.
• Identify emerging threats, trends, and regulatory developments that may impact the Business Group and proactively develop mitigation strategies.

Skills

Cyber risk management

Executive communication

Strategic leadership

Stakeholder management

Regulatory compliance

Security governance

Cloud and AI security

Education

University degree in Information Security or related field

Security certifications preferred (CISSP, CISM, CRISC, CGEIT, or equivalent)

Job description

Sun Life Hong Kong is seeking a senior executive to lead the Business Group Information Security Officer function. The role partners with Business Group leadership to define and drive cyber risk strategy, resilience, and security outcomes across the business.

You will guide risk governance, security programs, and regulatory compliance while shaping multi-year security investments in a dynamic financial services environment. A proven track record advising senior leaders is essential.