Associate Director, Governance, Risk Management & Compliance
Salary undisclosed
Checking job availability...
Original
Simplified
A strong Governance, Risk Management / Compliance / Audit professional with broad experience, exposure, seniority and an agility to work in a dynamic environment within the first line team. With a strategic bent of mind and a hands-on approach, the candidate should be capable of dealing with complex situations with effective delivery and change adoption feasibility. The candidate should have a proven track record of working and advising Senior Executives.
Main Responsibilities:
Governance
- Act as role model in upholding Sun Life Company Code and ensure propagating code philosophy & programs, in letter & spirit across Sun Life Global Solutions (SLGS) SLGS Philippines
- Maintaining audit / regulatory exam readiness across the SLGS entity
- Collaborate and work closely with the Governance, Risk Management & Compliance (GRC) and audit teams within 1st, 2nd & 3rd line across enterprise, Digital Business and Technology Solutions (DBTS), regional teams in Hong Kong, SLGS GRC teams
- Responsible for the preparation of GRC Update for the quarterly Board Meetings
- Drive Local Policy Approval Committees for developing, reviewing, approving and periodically refreshing policies, directives & operating guidelines stemming from corporate, regional & local requirements
- Represent GRC teams across SLGS executive leadership forums, Board, Risk Committee etc. in bringing in the right level of urgency and attention for GRC matters
- Conducting GRC sessions with other business functions and elevating awareness
Risk Management
- Oversee & ensure completion of with GRC team key Risk Management programs
- Key Risk Process
- Risk Control Self-Assessment
- Functional Process Risk Controls
- Operational Risk Events
- Oversight & alignment with key Operational Risk Management Programs for SLGS around
- Processing Risk
- Information Management (Data Governance / Management including Records Management Program
- Third Party Risk Management Program
- Information Technology & Security Program
- Business Continuity Management, Disaster Recovery & Crisis Management
- Right-size risk assessments for SLGS’ significant projects, initiatives, Transition & third party relationships leveraging the Business Practice Review (BPR)s
Compliance
- Drive programs in the management and mitigation of Compliance Risk across SLGS
- Regulatory Compliance
- Privacy Risk Management
- Fraud Risk Management
- Prevention of Bribery & Corruption
- Anti-Money Laundering & Anti-Terrorist Financing
- Related Party Transaction
- Manage and update the SLGS’ Compliance Program by identifying new laws and regulations.
- Monitor regulatory changes and assess implications on business. Ideate processes and controls with management to ensure compliance with requirements.
- Liaise with regulatory authorities – DOLE, BIR, SEC, LGU and others.
- Testing of compliances and reporting of results to the Board / Leadership teams of SLGS leveraging the Regulatory Compliance Monitoring testing methodology
- Incident Management – Investigation of code breaches (COBC), employee escalations, ethics hotline instances are objectively investigated & reported at various forum cases & ensure documentation including Incident Reports for audit trail
- Ensure zero tolerance to any non-compliance and ensure green rated audits in secretarial and legal matters
Skills & Competencies required to succeed:
- 15-20 years of work experience in the domain of Risk Management, Compliance, Control Testing, internal/external audit
- Certified Public Accountant (CPA) is required
- Professional certifications such as CISA, CRISC, or CGEIT are highly desirable. Strong knowledge of relevant regulations and industry standards (e.g., SOX, GDPR, ISO 27001, ISO 9001)
- Demonstrated experience and knowledge of Regulatory Compliance Management framework components and linkages, with a focus on Monitoring & Testing
- Excellent verbal and written communication skills, with strong interpersonal skills
- Self-motivated and independent driving results through seamless & timely service delivery
- Takes responsibility for maintaining a culture of continuous learning
- Analytical thinker with strong conceptual and problem-solving skills
- Organized and detail-oriented with the ability to make sound judgments
- Strong knowledge of the financial services industry, compliance issues and regulatory focus preferably with previous experience in managing Financial / Shared Services / MNC organizations
- Solve problems and analyze issues & build insightful stories for driving improvements
People Management:
- Facilitation, negotiation and influencing skills to achieve results in a matrix management environment
- Proven track record of building and leading high-performing teams, fostering a culture of collaboration and continuous learning
- Display integrity and composure while dealing with multiple senior stakeholders & functional leaders
- Collaborate and promote teamwork
- Build relationships & diverse, equitable and inclusive teams
- Strong multi-cultural & multi-generational understanding and application
- High degree of work ethics and professionalism; leads by example
A strong Governance, Risk Management / Compliance / Audit professional with broad experience, exposure, seniority and an agility to work in a dynamic environment within the first line team. With a strategic bent of mind and a hands-on approach, the candidate should be capable of dealing with complex situations with effective delivery and change adoption feasibility. The candidate should have a proven track record of working and advising Senior Executives.
Main Responsibilities:
Governance
- Act as role model in upholding Sun Life Company Code and ensure propagating code philosophy & programs, in letter & spirit across Sun Life Global Solutions (SLGS) SLGS Philippines
- Maintaining audit / regulatory exam readiness across the SLGS entity
- Collaborate and work closely with the Governance, Risk Management & Compliance (GRC) and audit teams within 1st, 2nd & 3rd line across enterprise, Digital Business and Technology Solutions (DBTS), regional teams in Hong Kong, SLGS GRC teams
- Responsible for the preparation of GRC Update for the quarterly Board Meetings
- Drive Local Policy Approval Committees for developing, reviewing, approving and periodically refreshing policies, directives & operating guidelines stemming from corporate, regional & local requirements
- Represent GRC teams across SLGS executive leadership forums, Board, Risk Committee etc. in bringing in the right level of urgency and attention for GRC matters
- Conducting GRC sessions with other business functions and elevating awareness
Risk Management
- Oversee & ensure completion of with GRC team key Risk Management programs
- Key Risk Process
- Risk Control Self-Assessment
- Functional Process Risk Controls
- Operational Risk Events
- Oversight & alignment with key Operational Risk Management Programs for SLGS around
- Processing Risk
- Information Management (Data Governance / Management including Records Management Program
- Third Party Risk Management Program
- Information Technology & Security Program
- Business Continuity Management, Disaster Recovery & Crisis Management
- Right-size risk assessments for SLGS’ significant projects, initiatives, Transition & third party relationships leveraging the Business Practice Review (BPR)s
Compliance
- Drive programs in the management and mitigation of Compliance Risk across SLGS
- Regulatory Compliance
- Privacy Risk Management
- Fraud Risk Management
- Prevention of Bribery & Corruption
- Anti-Money Laundering & Anti-Terrorist Financing
- Related Party Transaction
- Manage and update the SLGS’ Compliance Program by identifying new laws and regulations.
- Monitor regulatory changes and assess implications on business. Ideate processes and controls with management to ensure compliance with requirements.
- Liaise with regulatory authorities – DOLE, BIR, SEC, LGU and others.
- Testing of compliances and reporting of results to the Board / Leadership teams of SLGS leveraging the Regulatory Compliance Monitoring testing methodology
- Incident Management – Investigation of code breaches (COBC), employee escalations, ethics hotline instances are objectively investigated & reported at various forum cases & ensure documentation including Incident Reports for audit trail
- Ensure zero tolerance to any non-compliance and ensure green rated audits in secretarial and legal matters
Skills & Competencies required to succeed:
- 15-20 years of work experience in the domain of Risk Management, Compliance, Control Testing, internal/external audit
- Certified Public Accountant (CPA) is required
- Professional certifications such as CISA, CRISC, or CGEIT are highly desirable. Strong knowledge of relevant regulations and industry standards (e.g., SOX, GDPR, ISO 27001, ISO 9001)
- Demonstrated experience and knowledge of Regulatory Compliance Management framework components and linkages, with a focus on Monitoring & Testing
- Excellent verbal and written communication skills, with strong interpersonal skills
- Self-motivated and independent driving results through seamless & timely service delivery
- Takes responsibility for maintaining a culture of continuous learning
- Analytical thinker with strong conceptual and problem-solving skills
- Organized and detail-oriented with the ability to make sound judgments
- Strong knowledge of the financial services industry, compliance issues and regulatory focus preferably with previous experience in managing Financial / Shared Services / MNC organizations
- Solve problems and analyze issues & build insightful stories for driving improvements
People Management:
- Facilitation, negotiation and influencing skills to achieve results in a matrix management environment
- Proven track record of building and leading high-performing teams, fostering a culture of collaboration and continuous learning
- Display integrity and composure while dealing with multiple senior stakeholders & functional leaders
- Collaborate and promote teamwork
- Build relationships & diverse, equitable and inclusive teams
- Strong multi-cultural & multi-generational understanding and application
- High degree of work ethics and professionalism; leads by example