Head of Technology & Cyber Risk, US

Sun Life; Portland (ME); On-site; USD 167,000 - 267,000; Full time

Benefits offered by this job

Vacation & sick time

Parental leave

Life insurance

401(k) match

Job summary

Sun Life U.S. seeks an AVP, Technology & Cyber Risk Management to lead the second-line technology and cyber risk oversight for the US business group. You will partner with first-line leaders to provide timely insights on initiatives, controls, incidents, and emerging risks.

This role ensures governance artifacts provide executive management and boards with clear assurance on risk posture and alignment with risk appetite, while shaping the risk program strategy and its continuous improvement.

Qualifications

• University degree and professional designation with more than 10 years of experience.
• CISSP, CISM, CISA, or ITIL certification is preferred.
• Deep knowledge of global technology and cyber standards including NIST CSF.
• Experience with Risk and Control Self-Assessments, OREs, KRIs and scenarios.
• Executive communication, influencing senior stakeholders, and strategic planning.

Responsibilities

• Lead US technology and cyber risk oversight program.
• Challenge risk policies, standards and supporting directives.
• Develop KRIs and monitor risk indicators with first line.
• Report risk posture to committees on a quarterly basis.
• Drive continuous improvement of the US risk program.

Skills

Risk management

Executive communication

Stakeholder influence

Regulatory knowledge

NIST CSF knowledge

RCSA & KRIs

Strategic planning

Change leadership

Incident management

Problem solving

Education

Bachelor's degree + professional designation

CISSP / CISM / CISA / ITIL

Job description

Sun Life U.S. seeks an AVP, Technology & Cyber Risk Management to lead the second-line technology and cyber risk oversight for the US business group. You will partner with first-line leaders to provide timely insights on initiatives, controls, incidents, and emerging risks.

This role ensures governance artifacts provide executive management and boards with clear assurance on risk posture and alignment with risk appetite, while shaping the risk program strategy and its continuous improvement.