You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Role summary

The TPRM Analyst supports the end-to-end Third-Party Risk Management (TPRM) lifecycle, including risk assessment, due diligence, ongoing monitoring and remediation tracking. The role ensures that third-party risks are identified, assessed and mitigated in line with internal policies and regulatory requirements. The Analyst will support the TPRM 1B function and work closely with business stakeholders and supplier relationship managers across Business Groups. The role will report to the Associate Director within the Governance, Risk Management and Compliance (GRC) team, which provides strategic consulting services to the enterprise globally.

What you will do

1. Program Oversight and Governance

• Provide oversight of the TPRM Program across Business Groups (Asia, Corporate, Sun Life US and Sun Life Capital Management), validating third-party risk assessments and confirming that appropriate due diligence and ongoing management activities are performed.
• Act as a control gatekeeper, ensuring the TPRM Program operates in compliance with Sun Life and regulatory requirements.
• Serve as a subject matter expert on enterprise third-party governance, risk and management requirements.
• Support the business functions in day-to-day operational and control aspects of TPRM
• Act as HK representative and liaise with Regional TPRM teams on TPRM initiatives, including collating and sharing the BUs practices and lessons learnt.
• Manage the interaction with key stakeholders in local business units across different level to understand the TPRM requirements and develop approaches that meet the relevant Corporate and regulatory requirements
• Interface and partner with second line risk functions and subject matter experts on risk and policy compliance aspects of TPRM
• Oversee and support troubleshooting and root-cause analysis of TPRM related issues, and timely escalation and resolution of issues with relevant stakeholders.

2. Risk Assessment and Due Diligence

• Conduct risk assessments and due diligence reviews for new and existing third parties.
• Support and coordinate the issuance, completion and review of third-party questionnaires through the TPRM Tool.
• Monitor remediation activities and ongoing compliance requirements through to closure.

3. Stakeholder Engagement and Advisory

• Partner with internal stakeholders to facilitate the timely completion of risk management activities.
• Advise supplier relationship managers on TPRM requirements across the supplier lifecycle, including the required tools, templates and methodologies.

4. Reporting, Insights and Continuous Improvement

• Prepare third-party risk reports, metrics and management updates using ServiceNow, Tableau and Excel, identifying red flags and addressing them with supplier relationship managers.
• Identify industry trends in effective third-party relationship management and recommend opportunities to improve efficiency.
• Contribute to continuous improvement, process enhancement and automation initiatives within the TPRM Program.

What you need to succeed

Education and Experience

• Required: 3 years of experience in Third-Party Risk Management, Risk Management, Compliance, Information Security, Audit or a related field.
• Required: Bachelor’s degree in business, Finance, Risk Management, Technology or a related field, or equivalent experience.
• Preferred: Experience within a federally regulated financial institution (within Banking, Financial Service or Insurance sector).

Technical and Domain Knowledge

• Required: Knowledge of vendor risk management practices and regulatory requirements, including OSFI Guideline B-10.
• Required: Proficiency in Microsoft Office applications, particularly Excel and PowerPoint.
• Required: Artificial Intelligence (AI) literacy and the ability to apply responsible AI practices in day-to-day operations, including effective use of approved tools, critical review of AI-generated outputs, and awareness of related risks and controls.
• Preferred: 1-2 years of working experience with ServiceNow.

Core Competencies

• Strong analytical and problem-solving skills, with a demonstrated ability to identify, comprehend and resolve issues.
• Strong stakeholder management skills, with the ability to act independently and support business partners through the issue resolution process with suppliers.
• Excellent written and verbal communication skills.
• Ability to manage work to fixed deadlines and to report on progress transparently and concisely.

Job Category:

Posting End Date: