Senior Manager, AI Risk, Asia

sunlife; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Sun Life seeks an AI Risk Governance professional to provide second line oversight of AI, Generative AI and related initiatives across Asia. You will challenge implementations, support governance standards, and monitor regulatory obligations while collaborating with regional stakeholders.

The role focuses on identifying, assessing and mitigating AI-associated risks, ensuring responsible and compliant deployment of AI-enabled solutions in Asia markets.

Responsibilities

• Subject matter expert for AI Risk and Responsible AI practices.
• Second line of defense review and challenge of AI, Generative AI, ML, and analytics across Asia.
• Oversee and enhance Sun Life's AI Governance Framework, standards, and related processes in Asia.
• Provide independent risk opinions on material AI initiatives, deficiencies, remediation plans and governance decisions.
• Coordinate AI risk assessments including cyber risk, technology risk, data risk, model risk, regulatory risk and ethics.
• Monitor key AI risks such as security, data quality and operational resilience across markets.
• Ensure compliance with internal AI governance requirements across Asia markets.

Job description

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

As part of the second line of defense, the role provides independent oversight, effective challenge, and advisory support to Business Units, Functional Areas, and Regional stakeholders to ensure risks arising from Artificial Intelligence, Generative AI, and other emerging technologies are appropriately identified, assessed, monitored, and managed within Sun Life's risk appetite and regulatory obligations.

The role provides second line oversight and advisory support for the implementation and continuous enhancement of Sun Life's AI Governance Framework and Responsible AI practices across Asia. First line stakeholders remain accountable for implementing and operating the applicable governance processes and controls.

The role serves as a regional subject matter expert on AI Risk and Responsible AI, providing independent challenge and risk oversight of AI-enabled initiatives while supporting the advancement of Asia's technology and cyber risk oversight program through risk assessment, regulatory monitoring, stakeholder engagement, governance oversight, and reporting.

Responsibilities:

AI Risk Oversight

• Serve as the subject matter expert for AI Risk and Responsible AI practices.
• Conduct second line review and challenge of AI, Generative AI, machine learning, and advanced analytics initiatives across Asia.
• Provide second line oversight on the implementation, maintenance, and continuous enhancement of Sun Life's AI Governance Framework, standards, and supporting processes across Asia.
• Provide independent risk opinions and recommendations on material AI initiatives, control deficiencies, remediation plans, and governance decisions.
• Coordinate and challenge AI risk assessments, including evaluation of:
  • Cyber risk
  • Technology risk
  • Data risk
  • Model risk
  • Regulatory and compliance risk
  • Ethical and responsible AI considerations
• Assess and monitor key AI-related risks, including security, operational resilience, explainability, transparency, data quality, etc.
• Provide second line oversight and challenge over the completeness, accuracy, and effectiveness of the regional inventory and related governance processes for AI use cases, models, and AI-enabled solutions subject to governance requirements.
• Support the development and enhancement of AI governance standards, procedures, guidance, and operating models across Asia.
• Monitor compliance with internal AI governance requirements and applicable regulatory obligations across Asia markets.
• Contribute to the identification, assessment, escalation, and monitoring of emerging technology and cyber risks.

Risk Advisory and Stakeholder Engagement

• Partner with Business Units, Technology teams, Data Governance offices, Risk functions, Compliance teams, and governance stakeholders to provide independent advisory support on AI, technology, cyber, and data risk matters.
• Promote proactive identification and management of AI and technology-related risks.
• Support business and technology teams in understanding governance expectations and regulatory requirements relating to AI and emerging technologies.
• Participate in regional governance committees, forums, and working groups as a subject matter resource for AI Risk and Technology Risk.
• Build strong relationships with regional and local stakeholders to promote effective risk management outcomes.

Key Stakeholder Relationships

The role will establish and maintain effective working relationships with key stakeholders across the first and second lines of defense. This includes partnering with first line AI Governance, Business, Technology, Data, and control owners to clarify governance expectations, support the identification and assessment of AI risks, and promote timely remediation and responsible delivery of AI-enabled initiatives. Within the second line, the role will work closely with Model, Business and Corporate Technology (MBCT), Technology and Cyber Risk, Operational Risk, Compliance, Privacy, and other risk functions t