Senior Compliance Analyst - U.S. Compliance

Job Overview

Sun Life embraces a hybrid work model that balances in‑office collaboration with the flexibility of virtual work. Our team members and leaders are expected to foster connection and teamwork by being present in the office at least two days per week.

In this role, you will support compliance risk‑management programs across multiple U.S. Business Units by ensuring adherence to legislative and regulatory requirements and investigating and resolving matters of non‑compliance to maintain ethical standards across the organization.

You will be responsible for both direct support of compliance program activities and day‑to‑day oversight and monitoring activities of the Privacy Program operating within the Regulatory Compliance Management Program under the supervision of a Director and/or AVP. The primary focus is to perform privacy control activities such as privacy impact assessment review, privacy incident analysis, horizon scanning evaluation, and other tasks that directly impact the health of the Privacy Program and internal and external reporting.

Support for regulatory examinations, internal audits, or other regulatory matters may be required as appropriate. The position may require modest travel to other Sun Life Offices in the U.S. and Canada and requires weekly in‑office attendance at a hub office location.

• Review, analyze, and assess privacy/cyber/AI risks arising from vendor relationships and business initiatives (Privacy Impact Assessments).
• Investigate and document privacy events/incidents to ensure required escalation and notification.
• Perform research for the assessment of new or amended privacy/cyber/AI laws and regulations affecting the Company’s business, monitoring necessary actions for cross‑functional implementation, and tracking implementation and compliance with such actions.
• Interpret internal/external business issues and recommend privacy best practices to mitigate risk.
• Provide expertise for RFPs and due diligence questionnaire responses for new and existing relationships.
• Disseminate required privacy notices to Business Units for timely distribution and ensure accurate record‑keeping to support second‑line oversight.
• Support the development of privacy policies and procedures to maintain effective compliance with legal and regulatory standards as well as Sun Life policies.
• Participate in annual risk‑based compliance testing to ensure effectiveness in meeting the needs of the business and regulatory requirements.
• Draft compliance bulletins, review and edit marketing materials and forms, correspondence, and other communications in line with regulatory requirements.
• Maintain metrics/KPIs and prepare internal and external reports for varying audiences.
• Encourage, promote and enhance a culture that supports the Code of Conduct, encourages ethical behavior, and a commitment to compliance with applicable laws and regulations.
• Adhere to Sun Life policies and procedures to maintain effective compliance with legal and regulatory standards.

• Bachelor’s Degree with over 7 years of experience, professional certificate, or equivalent business experience in regulatory risk and controls roles or functions within a financial services regulated industry (HIPAA, GLBA, NAIC, CCPA, NY DFS, etc.).
• Adaptability to multiple demands, effectively shifting priorities in response to changing business conditions with minimal input from superiors.
• Identification, development, and application of innovative solutions to increase operational efficiencies and meet strategic objectives.
• Clear ethical judgement based on careful critical, analytical, and interpretative thinking.
• Demonstrated ability to work both independently and within a team‑oriented setting.
• Effective and influential communication (written and oral), research, and presentation skills responsive to changing audiences.
• Professional curiosity to maintain privacy expertise through business reading, professional development, and participation in industry forums.
• Strong computer skills (e.g., Microsoft Office suite) and demonstrated ability to apply AI…