AVP, Tech & Cyber Risk Leadership (US)

Sun Life; Massachusetts; On-site; USD 167,000 - 267,000; Full time

Job summary

Sun Life U.S. seeks an AVP, Technology & Cyber Risk Management to lead second-line risk oversight for the US business group.

You will partner with first-line leaders to provide timely insight on initiatives, controls, incidents, and emerging risks, ensuring executive management and boards have clear assurance of risk posture and alignment with appetite. You will drive the US risk program, monitor KRIs, and report to risk committees, while guiding regulatory alignment and continuous improvement

Qualifications

• University degree or higher required with professional designation preferred.
• Professional technology or information-security certification such as CISSP, CISM, CISA, or ITIL.
• Deep knowledge of global technology and cyber standards, regulatory expectations, and industry practices (incl. NIST).
• Experience with Risk and Control Self-Assessments, Operational Risk Events, Key Risk Indicators, and scenario analysis.
• Strong understanding of first-line technology processes, controls, and systems (risk management, change, problem, incident).
• Executive-level presentation, communication, negotiation, and conflict-management skills.

Responsibilities

• Own US technology and cyber risk oversight (25%).
• Deliver risk reporting and committee assurance (15%).
• Lead the execution, maintenance, and continuous improvement of the US technology and cyber risk program (50%).
• Strengthen regional risk capability and alignment (10%).
• Operate with minimal day-to-day direction and define challenge strategy for risk management.

Skills

Executive communication

Stakeholder influence

Change leadership

Strategic planning

Risk and control assessments

NIST framework knowledge

Incident management

Education

University degree or higher

Professional designation (CISSP/CISM/CISA/ITIL)

Job description

Sun Life U.S. seeks an AVP, Technology & Cyber Risk Management to lead second-line risk oversight for the US business group.

You will partner with first-line leaders to provide timely insight on initiatives, controls, incidents, and emerging risks, ensuring executive management and boards have clear assurance of risk posture and alignment with appetite. You will drive the US risk program, monitor KRIs, and report to risk committees, while guiding regulatory alignment and continuous improvement