Director, Corporate Risk Information Management

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

About the role

Reporting to the Assistant Vice President, Emerging Risk Management & Strategic Risk Initiatives, the Director, Corporate Risk Information Management is accountable for the oversight of the information management, records management, and data governance policy requirements and underlying programs across Corporate Risk, which includes Enterprise & Operational Risk Management, Insurance & Financial Risk Management, Investment & Credit Risk Management, and the Corporate and DBTS Business Group Risk Office teams. The Director sets direction, maintains the framework and methodology, and holds Information Stewards, Records Officers, Records Custodians, Data Custodians and Risk Office teams accountable so that information assets are properly classified, protected, retained, disposed of, and governed in alignment with the Enterprise Information Management Policy, regulatory expectations, and business needs. The Director leads continuous improvement of the program, including enhancements to tools, and strengthens program governance, effectiveness, and efficiency.

The Director is the accountable owner for structured and non-structured business records and information assets within Corporate Risk, in line with the Enterprise Information Management Policy.

The role holds the Records Steward, Records Officer, Data Governance Operational Lead, and Non-Structured Data Information Stewardship accountabilities for Corporate Risk, reflecting the centralized operating model of the function. It provides integrated oversight of information lifecycle management, repository governance, data quality, metadata, reporting, and information risk management, and ensures consistent execution of records and information management requirements across Corporate Risk.

What you'll be doing

Lead information governance, risk, and compliance

• Serve as the accountable lead for Non-Structured Information Management governance for Corporate Risk.
• Maintain the Corporate Risk information management framework, operating guidelines, and standards, aligned to the Enterprise Information Management Policy, and oversee adherence to policy and related control expectations.
• Provide guidance and advice to Business Group Risk Office teams and business leaders when judgement or clarification is required on information governance obligations, risks, and implementation requirements. Provide advice into strategic decisions and program improvements.
• On a quarterly basis, independently evaluate the Corporate Risk information management risk profile, including Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs), and report results, material non-compliance, and significant issues to senior management and the Operational Risk and Compliance Committee (ORCC) in a timely manner.
• Oversee and coordinate Corporate Risk's response to Risk Control Self Assessments, audits, compliance reviews, and regulatory examinations, and oversee related issue remediation activities related to information management.
• Prepare an annual report to senior management and ORCC on the status of the information management, records management, and data governance program.
• Establish, maintain, and continually enhance the oversight and monitoring frameworks for the program.
• Monitor and benchmark Corporate Risk information management practices against industry standards, regulatory expectations, and best practices, and assess complex information risk issues to guide solution recommendations.
• Develop and own the short- and mid-term strategy and roadmap for information management, records management, and data governance in Corporate Risk, aligned to enterprise and Business Group strategy, and provide significant input to Corporate Risk's strategic and long-term plans.
• Set program roll out objectives and plan and prioritize program resources, milestones, and dependencies across Corporate Risk.

Records and information lifecycle management

• Direct and oversee records management activities, including records classification, retention, legal holds, disposition, and remediation planning.
• Perform and oversee Records Officer responsibilities for Corporate Risk, retaining accountability for consistent execution of records management requirements, guidance, monitoring, and issue follow-up.
• Oversee Records Impact Assessments (RIAs) and Records Management Risk Reviews when new or changed processes, systems, repositories, vendors, or operating models may affect the creation, storage, access, retention, transfer, or disposition of Corporate Risk business records, and provide guidance on complex or high-risk cases.
• Oversee the maintenance of records and repository inventories and ensure ownership and stewardship assignments remain current.
• Determine how Corporate Risk business records are identified, classified, captured, stored, protected, retained, and disposed of, and hold Records Custodians accountable for applying those determinations.
• Make final decisions within Corporate Risk on record designation, retention and disposition, legal hold implementation, and exceptions to records requirements, and escalate only matters that require enterprise policy interpretation or an exception to enterprise policy.

Advance data governance and repository oversight

• Provide oversight and approval of Data Governance artifacts and Business Impact Statements prepared by Information Stewards.
• Lead data quality, metadata, business glossary, lineage, classification, and critical information inventory practices, including the related standards and methodology.
• Monitor and report Data Governance KPIs and oversee remediation of identified issues.
• Lead governance of SharePoint, Teams, shared mailboxes, network drives, and other non-structured business repositories.

Enable change and stakeholder engagement

• Build strong working relationships with Information Owners, Records Custodians, Information Custodians, Risk Offices, Compliance, Legal, Technology, Data Governance teams, and other relevant teams involved in records and data management to drive execution of key deliverables within the Three Lines of Defense model.
• Develop, maintain, and deliver training, communications, and practical guidance to Information Stewards, Records Custodians, Risk Office teams, and other stakeholders to support adoption of information governance practices.
• Lead cross-functional discussions to resolve issues, mature governance practices, and embed sustainable ways of working.
• Represent Corporate Risk on peer Steering Groups and provide direction on information management matters.
• Work closely with Business Group Risk Office teams on the effective roll-out of program changes.
• Develop and communicate the vision for information governance in Corporate Risk and build consensus on operating goals aligned with the Risk division.

What you'll need to succeed

• University degree in Information Management, Data Governance, Records Management, Business Administration, Risk Management, Library Sciences, Information Technology, or a related discipline, and/or relevant certification.
• 5+ years of risk management, records management, data governance, or information governance experience, with a proven track record of designing and implementing effective programs, controls, and processes, ideally within a major federally regulated financial institution.
• Direct experience writing policies and guidelines, and implementing governance frameworks, standards, controls, or enterprise operating procedures.
• Demonstrable experience leading cross-functional initiatives, developing strong working relationships, and influencing senior stakeholders in a large, matrixed organization within the Three Lines of Defense model.
• Proven experience dealing with complexity and ambiguity, using broad knowledge, keen analysis, and sound professional judgement to arrive at quality decisions.

• Working knowledge of Sunlife’s information management, records management, data governance, privacy, compliance, and operational risk practices.
• Ability to translate complex policy, risk, records, and data governance requirements into clear business guidance, communications, training, and sustainable operating practices.Strong knowledge of information management, records management, and data governance principles, including information lifecycle management, repository governance, metadata management, information classification, and data quality management, with the ability to assess, measure, and monitor information risk.
• Strong knowledge of the information and records management landscape, financial industry leading practices, and regulator expectations.
• Exceptional analytical, problem-solving, and decision-making abilities, with keen attention to detail, and experience in risk assessment, control design, compliance monitoring, reporting, and analytics.
• Working knowledge of Microsoft 365, SharePoint, Teams, shared mailboxes, network drives, and other collaboration platforms.
• Experience implementing, managing, and maintaining a records, information governance, or GRC tool.
• Strategic mindset, with the ability to understand business requirements and develop innovative solutions.
• Excellent communication, facilitation, influencing, and stakeholder management skills, with the ability to communicate complex concepts to a diverse audience.
• Well-developed writing and visual presentation skills to articulate analytic results, options, recommendations, and reporting.
• Effective change management and change leadership through impact and influence skills, with governance oversight and a continuous improvement mindset.• Proactive and adaptable mindset, with the ability to thrive in a fast-paced and rapidly evolving organization.

What's in it for you:

• Being a member of the Sun Life family, a group of people united by our Purpose: to help Clients and Employees achieve lifetime financial security and live healthier lives.
• In 2024, Sun Life ranked among the top 100 most sustainable global corporations by Corporate Knights for the 15th consecutive year, leading Canadian insurers.
• We are proud to be on the 2024 Best Workplaces in Canada list by Great Place to Work.
• We’re also listed as one of the Best Workplaces for Women and Best Workplaces with Most Trusted Executive Teams.
• Our unique Sabbatical Program gives you the opportunity to take up to 6 weeks off, every five years.
• Care Days available for self-care or care of others (i.e., family or others you may support) and Sick Days to support your well-being.
  
  

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [email protected].

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

130,000/130 000 - 180,000/180 000

Job Category:

Risk Management

Posting End Date:

26/11/2026