Manager / Senior Manager, Information Risk Management

About the role

Manulife is looking for a Manager or Senior Manager of Information Risk Management. The role requires a good understanding of technology and information security risks and controls, disaster recovery, and solid communication, presentation and influencing skills. It operates across multiple markets, businesses, functions and geographies to raise awareness of risks and controls.

Key responsibilities

• Provide second-line Information Risk Management oversight of first-line activities such as change management, third-party risk, incident response, business continuity and disaster recovery, aligned with the internal IRM framework.
• Review and challenge issues, risks and exceptions against IRM standards.
• Deliver market-specific risk insights and advisory support, guide market teams on global IRM initiatives and monitor risk remediation plans.
• Facilitate evaluation of market risk posture through structured reporting.
• Prepare for and follow up on market Information Risk Council meetings and build relationships with Market IT, Risk, Compliance and other stakeholders.
• Use internal risk tools for oversight and reporting, and carry out ad hoc administrative tasks.

Required profile

• Bachelor's degree in Information Technology or a related field.
• 1 to 3 years of relevant experience in information risk management or information security management.
• Solid technology background with a risk management sense.
• Broad knowledge of financial services and insurance business and products.
• Professional designation such as CISSP, CRISC, CISA, CSSLP or CISM is an advantage.

Required skills

• Strong written and oral communication and presentation skills.
• Analytical, critical thinking and strategic problem-solving skills.
• Influencing skills and ability to build relationships across divisions.
• High proficiency in data analytics tools such as Power BI is a plus.