Director, Corporate Operational Risk Management

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

About the job

Reporting to the Assistant Vice President, Operational Risk Transformation, the Director, Corporate Operational Risk Management (CORM) is accountable for the design, maintenance, and continuous improvement of Sunlife’s Operational Risk Management (ORM) Framework and supporting programs.

This role provides subject-matter expertise, independent Second Line oversight, and credible challenge across key operational risk disciplines. The Director supports enterprise transformation initiatives and strengthens program governance, practical application, analytical insight, and consistent execution across the organization.

The Director operates as a senior program leader and subject-matter expert, partnering closely with Business Group Risk Offices, First Line risk teams, Policy Owners, Corporate Risk Operations, and other key stakeholders. The Director is expected to translate operational risk concepts into simple, proportionate, and implementation-ready solutions that enhance operational risk capabilities and align with regulatory expectations and industry practices.

The role requires end-to-end accountability for assigned initiatives, from initial design and stakeholder decision-making through approval, implementation, adoption, and measurement of outcomes.

Sun Life’s Operational Risk Management Framework includes the following elements:

· Operational Risk Appetite, including qualitative and quantitative assessments

· Common risk language and operational risk taxonomy

· Consistent operational risk identification and assessment methodologies

· Internal and external operational risk event and loss data capture and analysis

· Risk and Control Self-Assessments

· Key Risk Indicators

· Scenario Analysis

· Issue Management and action-plan oversight

· Control documentation and control-effectiveness assessment

· Operational risk monitoring and reporting

· Second Line quality assurance, review, and challenge

What you'll be doing

· Lead the design, maintenance, and ongoing enhancement of the Corporate Operational Risk Management Framework and its core program components.

· Lead the development and implementation of operational risk tools, methodologies, and standards used to identify, assess, measure, monitor, and report operational risk.

· Translate complex operational risk concepts into clear, proportionate, and practical operating requirements for First and Second Line users.

· Establish the operating model, decision rights, roles, user journey, system boundaries, and measurable outcomes before progressing initiatives into detailed methodology, workflow, or system development.

· Maintain and update operational risk governance documentation, including policies, enterprise operating procedures, methodologies, standards, and guidance, ensuring clarity, internal consistency, regulatory defensibility, and practical usability.

· Provide independent Second Line oversight, review, and effective challenge of First Line operational risk practices, assessments, risk conclusions, and reporting outcomes.

· Challenge the reasonableness of inherent and residual risk assessments, control-effectiveness conclusions, risk responses, Risk Appetite alignment, and remediation effectiveness.

· Integrate insights across RCSAs, KRIs, operational risk events, Issues, controls, scenarios, audit and compliance findings, and other risk information to identify contradictions, concentrations, recurring themes, and systemic exposures.

· Partner closely with BGROs and First Line operational risk teams to support effective rollout and adoption of program enhancements, tools, and methodology changes.

· Lead stakeholder engagement through developed recommendations, clear options and trade-offs, defined decision requirements, and transparent disposition of feedback.

· Support the production and enhancement of enterprise operational risk reporting, including analysis, challenge, and validation of inputs.

· Contribute to the preparation of the quarterly enterprise operational risk profile for Senior Management and the Board, including data-integrity checks, cross-risk analysis, thematic insights, and clear escalation of material concerns.

· Use analytics, automation, and appropriately governed AI capabilities to improve the quality, consistency, coverage, and efficiency of Second Line oversight.

· Define and monitor measurable benefits for program enhancements, including adoption, coverage, quality, cycle time, efficiency, and risk-insight improvements.

· Deliver training and practical guidance on operational risk methodologies, tools, and expectations to First Line and risk partners.

· Support alignment with regulatory expectations by designing and implementing targeted program enhancements in response to emerging requirements.

· Monitor, assess, and benchmark Sunlife’s operational risk practices against peer institutions, regulatory expectations, and industry practices.

· Exercise end-to-end accountability for the quality, operational readiness, timely delivery, and successful implementation of assigned initiatives.

· Escalate unresolved design, ownership, stakeholder, or delivery issues before they affect development or implementation commitments.

· Where applicable, provide clear direction, coaching, quality review, and development opportunities to team members supporting assigned initiatives.

What you'll need to succeed

· 8+ years of experience in risk management within the financial services industry.

· Direct experience in corporate operational risk management or a closely related field, including methodology design, enterprise reporting, governance, and Second Line oversight within a federally regulated financial institution.

· Strong grounding in operational risk frameworks, internal controls, Risk Appetite, Issue Management, risk governance, and the Three Lines model.

· Demonstrated ability to design practical operating models and translate regulatory, policy, and methodology requirements into executable business processes.

· Solid understanding of risk identification, assessment, measurement, monitoring, and response techniques, with the ability to apply sound judgment in complex business environments.

· Demonstrated ability to analyze data, identify themes, reconcile contradictory risk information, and provide credible challenge with strong attention to detail.

· Experience integrating information across RCSAs, KRIs, operational risk events, Issues, control assessments, scenarios, and audit or compliance findings.

· Well-developed writing and presentation skills, including experience preparing executive- and Board-level materials.

· Proven experience drafting, implementing, and maintaining risk policies, enterprise procedures, methodologies, standards, or guidance.

· Strong stakeholder-management and influencing skills, including the ability to drive decisions without direct authority across multiple Business Groups and fu