IJP- Specialist/Senior Specialist - IT Risk & Compliance

Sun Life of Canada (Philippines), Inc. Josephine Collado; Gurugram District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Sun Life Global Solutions India (SLGS India) is seeking a Risk Specialist, IT Risk & Compliance to support data quality, risk reporting, and mitigation of IT risks across the Digital Business & Technology Solutions (DBTS) group. The role reports to the Director, Risk Management within a global governance team that provides Governance, Risk and Compliance services to Enterprise Services globally.

You will collaborate with second-line risk teams to develop KRIs, assist in supplier risk processes,

Qualifications

• University degree in business, computer science, or IT/cybersecurity.
• 3–5 years of experience in reporting and data analysis.
• 3–5 years experience in risk and supplier management.
• Strong background in IT security, governance, compliance and risk management frameworks.
• Advanced Excel skills (macros, V-lookup, Pivot tables).
• Professional certifications such as CISSP, CISM, CRISC are assets.

Responsibilities

• Assist with the identification, evaluation, and assessment of information technology risks through RCSA process across DBTS.
• Develop monthly/quarterly reporting and ensure DBTS KRIs are updated, monitored, and reported on.
• Support the development and maintenance of organizational reporting, particularly supplier risk.
• Contribute to the quarterly risk committee report for DBTS executive team.
• Collaborate with Sun Life second-line risk teams to ensure a comprehensive view of IT risks.
• Work to ensure that operational risk events are reported, tracked, actioned, and closed.
• Manage the Governance, Risk, and Compliance tool used to support DBTS controls, waivers, and accepted risks.

Skills

Reporting & data analysis

Risk & supplier management

IT security & governance

Advanced Excel

CISSP/CISM/CRISC certifications

Education

University degree in business, computer science, or IT/cybersecurity

Tools

ServiceNow

RSA Archer

Job description

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Role Summary

The Risk Specialist, IT Risk & Compliance will have accountability to support data quality, risk reporting, identification, assessment, and mitigation of IT risks across the Digital Business & Technology Solutions (DBTS) business group. The role will report to the Director, Risk Management within a larger team that provides Governance, Risk and Compliance services to Enterprise Services globally.

Eligibility

• Completed at least eighteen (18) months of continuous service at SLGS India and last twelve (12) months in same team/role.
• The applicant should not be on a Performance Improvement Plan / Action Plan during the last 6 months.
• Applicant should not have received any Warning Letter in the last 6 months and No COBC Warning Letter in last 12 months.
• Recent appraisal rating of 3 or above at Band 5.1/5.2.
• Mandatory experience in reporting and data analysis.
• Good to have experience in risk and supplier management

What will you do

Reporting and Governance

Risk Control Self Assessments (RCSA) : Assist with the identification, evaluation, and assessment of information technology risks through RCSA process across DBTS. Monitor and report on status of any mitigating action plans.

Key Risk Indicators (KRI) : Working alongside program lead on developing monthly/ quarterly reporting and ensuring DBTS KRIs are updated, monitored, and reported on.

Support the development and maintenance of organizational reporting, particularly as it pertains to supplier risk.

S takeholder Communication : Contribute to the quarterly risk committee report for DBTS executive team. Report regularly to senior leadership and other stakeholders on the current state of IT risks, mitigation efforts, and any new threats or vulnerabilities as needed.

Collaboration : Work closely with Sun Life second-line risk teams to ensure a comprehensive view of IT risks across the enterprise.

Operational Risk Events (ORE) :Working alongside program lead to ensure that operational risk events are reported, tracked, actioned, and closed.

Technology

Day to day management of the Governance, Risk, and Compliance tool used to support DBTS controls, waivers, and accepted risks. Ensure that the Corporate Risk systems are updated with relevant RCSA, ORE, and KRI data. Create, maintain and recommend automation tools to enable risk, control and process information to support risk management processes.

Business Partner Relationship Management

Assist in facilitating supplier risk processes (e.g. risk reviews, continuous improvement, etc.) Provide guidance internally on the requirements of various risk programs. Provide guidance and support for all organizational supplier governance, risk, and management requirements.

What you need to succeed

• University degree in business, computer science, or general ITCyber security related.
• 3-5 years of experience in reporting and data analysis.
• 3-5 years experience in risk and supplier management.
• Strong background in IT security, governance, compliance, and risk management frameworks.
• Advanced Excel skills (macros, V-lookup & Pivot tables) Professional certifications such as CISSP, CISM, CRISC, or other relevant certifications are assets.

Preferred Skills

• Good understanding of supplier risk, records management, business continuity, privacy and information management
• Strong verbal and written communications skills - must have the ability effectively present
• Strong consulting and relationship management skills recommendations
• Strong aptitude towards process development and documentation
• Strong client service orientation
• Excellent interpersonal skills
• Extensive knowledge of IT risk management, cybersecurity principles, and compliance standards.
• Experience in crisis management and incident response.
• Familiarity with risk management frameworks such as NIST, ISO 27001, COBIT, and ITIL.
• Experience with insurance, banking, or other financial services environments is preferred.
• Experience with ServiceNow and RSA Archer is an asset
• Excellent communication and interpersonal skills, with the ability to communicate complex technical concepts to non-technical stakeholders .