AVP, Tech & Cyber Risk Strategy

Sun Life; Wellesley (MA); On-site; USD 167,000 - 267,000; Full time

Benefits offered by this job

Vacation and sick time

Family leave

Medical coverage

Life and AD&D insurance

401(k) match

Stock purchase plan

Sabbatical program

Job summary

Sun Life U.S. seeks an AVP, Technology & Cyber Risk Management to lead second-line oversight for the US business. You will partner with first-line leaders to provide timely insight on initiatives, controls, incidents, and emerging risks, ensuring executive-level assurance on risk posture.

You will report on risk, develop ongoing governance, and drive program maturity across regional practices, aligning with corporate risk functions and regulatory expectations.

Qualifications

• Bachelor's degree or higher required with strong professional credentials.
• Certifications such as CISSP, CISM, CISA, or ITIL highly valued.
• Deep knowledge of global technology and cyber standards, regulatory expectations, and best practices.
• Experience with Risk and Control Self-Assessments, Operational Risk Events, and KRIs.
• Ability to influence senior stakeholders and lead across functions.

Responsibilities

• Lead second-line technology and cyber risk oversight for US business group.
• Develop and maintain independent risk oversight program for US operations.
• Challenge policies, standards, and directives; refresh KRIs and assess RCSAs.
• Report risk to executive committees and regional risk groups.
• Drive continuous improvement of the US risk program and alignment with corporate risk.

Skills

Executive communication

Negotiation

Conflict management

Strategic planning

Leadership

Risk management

Education

Bachelor's degree or higher

Professional security certification (CISSP/CISM/CISA/ITIL)

Job description

Sun Life U.S. seeks an AVP, Technology & Cyber Risk Management to lead second-line oversight for the US business. You will partner with first-line leaders to provide timely insight on initiatives, controls, incidents, and emerging risks, ensuring executive-level assurance on risk posture.

You will report on risk, develop ongoing governance, and drive program maturity across regional practices, aligning with corporate risk functions and regulatory expectations.