You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have recent and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.
At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.
When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.
Discover how you can make a difference in the lives of individuals, families and communities around the world.
Job Description: Role Summary Sun Life is seeking a highly experienced and strategic Director, Technology & Cyber Control Testing to lead the execution and continuous evolution of our first-line Technology & Cyber Control Testing Program.Reporting to the AVP, Technology Risk & Compliance, the Director will be responsible for establishing and operating a scalable, risk-based control testing function that provides independent challenge and assurance over the design and operating effectiveness of technology and cyber controls across the Digital Business & Technology Solutions (DBTS) organization.This role will play a critical leadership position in advancing Sun Life's technology risk management capabilities and strengthening compliance with regulatory expectations, including OSFI, industry frameworks, and internal policies.



The successful candidate will build and lead a team responsible for control testing strategy, methodology execution, testing operations, quality assurance, issue reporting, remediation validation, and continuous improvement.
What You Will Do? Lead the Technology & Cyber Control Testing Program
Establish and manage an enterprise-scale technology and cyber control testing program across DBTS.
Develop multi-year testing strategies and annual testing plans aligned to technology, cyber, operational resilience, regulatory, and business risks.
Maintain the control testing universe and ensure testing coverage is aligned to material risk areas and control requirements.
Drive risk-based prioritization, scoping, and testing frequency decisions across technology and cyber domains.
Direct Control Testing Execution
Oversee the end-to-end lifecycle of control testing activities including planning, execution, review, reporting, and remediation validation.
Ensure testing is conducted using standardized methodologies, procedures, templates, sampling approaches, and evidence standards.
Lead teams performing design effectiveness and operating effectiveness assessments.
Provide oversight for thematic reviews, targeted reviews, process adequacy assessments, and substantive testing activities.Ensure testing conclusions are evidence-based, traceable, and defensible.
Build Scalable Testing Operations
Develop operating models, workflows,



governance processes, tooling, and repositories that enable consistent testing at scale.
Drive automation opportunities and data-driven approaches to improve testing efficiency and coverage.
Establish coordinated testing cycles and monitor execution performance against annual plans.
Manage resource capacity, delivery timelines, and stakeholder engagement across multiple concurrent testing activities.
Lead Quality Assurance and Program Governance
Build and oversee a formal quality assurance framework for technology and cyber control testing.
Establish reviewer standards, calibration programs, testing guidance, and quality metrics.
Drive consistency in testing execution, evidence assessment, issue classification, and reporting.
Conduct periodic program reviews to identify opportunities for enhancement and increased maturity.
Drive Reporting and Management Insights
Translate testing results into meaningful executive-level insights, trends, and risk intelligence.
Prepare reporting for senior management, risk committees, executives, regulators, and oversight functions.
Identify recurring control themes, emerging risks, systemic weaknesses, and root causes.
Develop actionable recommendations that strengthen the control environment and improve risk outcomes.
Manage Issues and Remediation
Oversee identification, assessment, escalation, and tracking of control deficiencies and exceptions.
Partner with technology, cybersecurity, engineering, and business leaders to drive remediation activities.
Validate corrective actions and assess remediation effectiveness.
Monitor recurring issues and ensure lessons learned are integrated into future testing activities.

#J-18808-Ljbffr

📌 Director, Technology & Cyber Control Testing (Ontario)
🏢 SunLife
📍 Ontario