VP, Business Group Chief Information Security Officer – Canada in Toronto

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful. When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives. Discover how you can make a difference in the lives of individuals, families and communities around the world.

The Vice-President, Business Group Information Security Officer, Canada (BG CISO) serves as a senior security leader and partner to the Business Group leadership team and Business Group President. Acting as the senior security executive for the Business Group and the primary bridge between the business and enterprise Security function, the BG CISO provides independent oversight and challenge of cyber risk, resilience and security outcomes across the business group. The BG CISO is accountable for cyber risk, resilience, and security outcomes for Sun Life Canada, one of the company’s core markets and a leader in health, wealth and protection, serving Clients across Canada through group benefits, individual insurance, wealth, advice and distribution channels.

The Canadian business is made up of complex ecosystems, requiring strong alignment with Canadian regulatory expectations, enterprise risk practices and digital/client-service priorities. Reporting directly to the global Chief Security Officer, this position will have direct and indirect reports including a team of ~10 security leads and advisors aligned to the Canada business and subsidiary priorities including oversight of Dialogue security, product/platform risk, incident readiness, and stakeholder engagement.

The BG CISO partners closely with executives, technology leaders, risk partners, and the enterprise security team to protect critical assets, enable innovation, strengthen resilience, and ensure risks are understood and managed within the organization's risk appetite. The BG CISO is accountable for providing independent business-aligned security oversight while enabling growth, innovation and transformation across the Business Group. The role translates complex cyber and security risks into business impacts and shapes strategy, investments, priorities, and operating decisions across the Business Group.

Major Accountabilities

• Serve as the primary Security advisor to the Business Group executive team and Business Group President.
• Accountable for defining and driving the Business Group security strategy, aligned to enterprise security priorities and business objectives.
• Ensure security considerations are integrated into business strategy, transformation initiatives, digital strategies, and operational decision-making.
• Report significant changes in risk to appropriate levels of leadership on a periodic and event-driven basis.
• Exercise independent challenge and accelerate material cyber, technology, resilience and security risks through appropriate governance forums when risk exposure exceeds established risk appetite or remediation commitments are not achieved.
• Deliver timely insights and data to enable informed executive decision-making, prioritization, and risk-based trade-offs.
• Influence and shape multi-year security, resilience, and technology risk investment strategies, ensuring resource allocation aligns with business priorities, regulatory expectations, and evolving threat landscapes.
• Identify emerging threats, trends, and regulatory developments that may impact the Business Group and proactively develop mitigation strategies.

Qualifications

• University degree in Information Security, Computer Science, Technology, Risk Management, Business, or a related discipline.
• Relevant security certifications preferred (CISSP, CISM, CRISC, CGEIT, or equivalent).
• 15+ years of progressive experience in cybersecurity, information security, technology risk, risk management or related disciplines.
• Experience advising senior global executives on technology and cyber risk matters.
• Experience operating in highly regulated environments.
• Proven ability to influence strategic and investment decisions at an executive level.
• Experience leading large-scale transformation, risk, or security initiatives.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds. Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to thebrightside@sunlife.com.

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.