Bring us your passion for digital or data analytics, and we’ll put you to work on exciting initiatives that answer the challenge: "How can we do that better?” Working with a dedicated team of energetic, forward-thinking innovators, you’ll stretch your imagination and sharpen your skills on the leading-edge projects that are keeping Sun Life Financial ahead of the curve. You want more than a job; you want a career - a career with a company that encourages learning and personal growth. You want to be “one of the best”.
Job Description:
The Director, Technology Risk and Compliance will strategically develop, lead and oversee risk management and compliance programs for the Digital and Client Technology Solutions (DCTS) area, including: technology audits, business continuity, client assurance/privacy and application security compliance programs. This role will provide governance support and maintain a comprehensive risk management framework across Canada Technology's diverse portfolio.
What You Will Do?
Strategic Canadian Business Partnership
Anticipate and respond to emerging technology risks and Canadian regulatory changes affecting the organization
Collaborate with Canadian senior management on strategic decisions impacting technology risk management
Lead engagement with Canadian external stakeholders, regulators and industry bodies on complex compliance matters
Support and coordinate the response to client inquiries on technology security and privacy frameworks
Governance Framework & Reporting
Oversee comprehensive application security compliance programs spanning DCTS's multiple disciplines and business units to ensure the framework and standards are adhered to
Design, implement, and operate effective controls within the system to provide reasonable assurance that Sun Life Canada’s service commitments and system requirements are achieved
Ensure delivery of audit processes to the adequate satisfaction of internal and external stakeholders from a governance and reporting perspective
Canada Technology Program Management
Direct comprehensive reviews of identity, entitlement and privileged access management processes across all critical Canadian applications
Establish and manage strategic partnerships with Canadian business functions to enhance their access review capabilities and maturity
Lead the development of Canada-specific risk management policies, standards and best practices ensuring alignment with regulatory requirements and industry frameworks
Risk Management
Act as the Business Continuity (BC) Coordinator and work with DCTS leaders, Enterprise Services and Corporate BCP and compliance offices ensuring all BC objectives are completed for the DCTS organization in a timely manner, including Disaster Recovery exercises.
Act as the Record Management Subject Matter Expert and focal point for the annual Records Management Inventory review, working with the DCTS leaders
Identify process-level risks, mitigation plans and communicate
Manage relationships with senior Canadian leadership, executive levels and external auditors regarding technology risk posture
Team Leadership & Development
Lead a team of 6-10 resources handling the day-to-day activities related to technology risk and compliance for DCTS
Ensure continual employee knowledge and skill growth through performance management process
Promotes constructive culture and employee engagement and drives for innovative thinking and solutions
What You Will Need to Succeed
10 or more years of progressive experience in Information Security, Risk Management or related functions with significant management experience
Proven track record of leading complex, multi-disciplinary risk and compliance initiatives within large Canadian technology organizations
Client focused mindset - exceed the expectations of our internal and external customers.
Deep expertise in operational risk management frameworks and processes
Comprehensive knowledge of Canadian regulatory compliance requirements and industry standards (ISO 27001, NIST, SOC 2, etc.)
Exceptional communication and influencing skills with ability to present to Canadian executive leadership and external stakeholders
Strong business acumen with understanding of Canadian financial services industry and regulatory environment
Proven ability to build consensus and manage complex stakeholder relationships across Canada Technology
Assets
Advanced certifications: CISSP, CISA, CRISC or equivalent enterprise security certifications
Experience in Canadian financial services or highly regulated Canadian industries
Advanced degree in Information Security, Risk Management, Business Administration or related field
Experience with enterprise GRC (Governance, Risk and Compliance) platforms and advanced analytics tools
For Quebec Residents: Bilingualism (French, English, both oral and written) is required as the position includes managing French and English-speaking staff (Quebec and outside Quebec) and providing daily support to the team.
What’s in it for you?
The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.
Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.
Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to thebrightside@sunlife.com.
We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you! Several work options are available and can be discussed throughout the selection process depending on the role requirements and individual needs.
We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.
Salary Range:
125,000/125 000 - 195,000/195 000Job Category:
IT - Technology ServicesPosting End Date:
04/01/2026