Information Risk Manager

The Information Risk Manager is responsible for supporting the directors within the team in the delivery of the 2nd Line of defense risk oversight program across North America. The incumbent will serve as or has the foundation to become a Subject Matter Expert on information security, technology risk, and business continuity and disaster recovery management within the North America IRM team.

Position Responsibilities:

• Support the Directors in delivering the second line of defense Information Risk Management oversight and challenge program across the U.S. and Canadian business segments, while enabling first line teams to effectively identify, assess, manage, and mitigate information risks.

• Conduct independent oversight and challenge activities across key risk areas, including strategic initiatives, high-risk third parties, business continuity and disaster recovery management, severe incidents and loss events, risk exceptions, issues and corrective action plans (CAPs), and Risk and Control Self-Assessments (RCSAs).

• Review and assess information security, technology risk, cyber security, business continuity, and operational resilience controls to ensure alignment with enterprise risk management frameworks and regulatory expectations.

• Support the identification, assessment, escalation, and monitoring of information risks and emerging threats impacting the business.

• Provide effective challenge and risk guidance to business and technology stakeholders to promote sound risk management practices and risk-informed decision-making.

• Maintain awareness of evolving laws, regulations, industry standards, and emerging risks related to information security, cybersecurity, information protection, privacy, technology risk, and operational resilience across multiple jurisdictions.

• Promote a strong risk culture and support Manulife's commitment to diversity, equity, inclusion, and ethical business practices.

• Perform other duties assigned by the Line Manager, as required, that are aligned with the incumbent's skill set and career development objectives.

Required Qualifications:

• Minimum of 6 years of progressive experience in information risk management, information security, technology risk, cybersecurity, business continuity, operational resilience, audit, compliance, or related risk management functions within a highly regulated environment.

• Demonstrated knowledge and experience in information security, technology risk management, business continuity and disaster recovery management, risk assessment methodologies, and control frameworks.

• Strong understanding of information risk management practices, risk governance principles, and second line of defense responsibilities.

• Excellent written and verbal communication skills, with the ability to convey complex technical and risk concepts to non-technical audiences, including senior business leaders and executives.

• Proven stakeholder management and relationship-building skills, with the ability to influence decisions and provide effective challenge across multiple business functions.

• Ability to analyze complex situations, identify key risks and control gaps, and provide practical, risk-based recommendations.

• Willingness and ability to work a mid-shift schedule and collaborate effectively with stakeholders across multiple global locations and time zones.

When you join our team: 

• We’ll empower you to learn and grow the career you want. 

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words. 

• As part of our global team, we’ll support you in shaping the future you want to see. 

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact hr@manulife.com.