You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You’ll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you’ll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

JOB DESCRIPTION:

The Manager, Cyber Risk will lead and coordinate initiatives within the second line Technology and Cyber Risk Management (TCRM) team, focusing on identification and assessment of cyber risks across the organization. This position demands advanced analytical skills, exceptional communication abilities, and a deep understanding of cybersecurity principles and risk management frameworks.
The Manager will drive the execution of real-time challenge across key initiatives and processes and will ensure challenge processes and artifacts are executed in a way that provides senior leadership with assurance as to Sun Life’s cyber risk management practices and risk posture vs. our risk appetite. The Manager will also assist in providing effective challenge by keeping up to date with the rapidly evolving external threat environment and regulatory expectations.

Policy and Framework Management:

• Lead development and maintenance of cyber risk management policies and procedures
• Ensure alignment with industry standards and regulatory requirements
• Design and implementation of risk assessment methodologies and frameworks

Strategic Coordination:

• Act as a liaison between the TCRM and other departments, including Technology, Compliance, and Business Groups
• Oversee and direct risk assessment activities, ensuring timely completion of high-priority projects
• Strategically manage and prioritize multiple complex initiatives simultaneously
• Facilitate cross-functional team meetings and working groups to address cyber risk issues

Executive Reporting and Communication:

• Develop comprehensive reports for senior management
• Prepare presentations on cyber risk trends and strategic implications
• Effectively translate complex technical concepts for non-technical executive stakeholders

Continuous Improvement and Innovation:

• Proactively identify and analyze emerging cyber threats, industry trends, and best practices
• Spearhead improvements to existing risk management processes and tools
• Participate in relevant training and professional development activities

Metrics and KRI Analysis:

• Conduct in-depth analysis of trends and patterns to drive strategic improvements in the organization’s cyber risk posture relative to risk appetite