We are seeking a detail-oriented and proactive Business Analyst to join our Vendor Information Security Management team. In this role, you will support the end-to-end coordination of vendor information risk assessments, including vendor onboarding, contract and service validation, assessment scheduling, documentation management, reporting, and stakeholder communication. You will act as a key liaison between vendors, internal business partners, and Information Security teams to ensure vendor information is accurate, assessments are completed efficiently, and risk management processes remain well organized and compliant.
Primary Responsibilities:
- Manage Vendor Information Security Management communication channels, respond to inquiries, follow up on outstanding requirements, and coordinate activities between vendors, business contacts, contract managers, and internal review teams.
- Create and maintain vendor profiles, confirm active or renewing contracts, validate the scope of services and vendor contact information, and ensure records are accurate across Archer, ProcessUnity, and internal trackers.
- Initiate new vendor assessments and reassessments, determine the appropriate in-scope questionnaires, verify supporting documentation, and coordinate additional reviews involving Cloud Architecture, Business Unit Security Officers, Business Continuity Management, Artificial Intelligence, and other relevant teams.
- Develop and maintain the annual Vendor Information Risk Assessment schedule, assign assessments to team members, monitor business acknowledgments, and reconcile assessment and vendor information across systems.
- Prepare monthly reporting, validate cases where an assessment is not required, monitor changes to Information Risk Questionnaire ratings, and identify or resolve ProcessUnity issues that may affect assessment activities.
Required Qualifications:
- University degree or equivalent combination of education and relevant business experience.
- Three to five years of business analysis, vendor management, third-party risk management, information security risk, or related risk experience.
- Strong organizational, analytical, problem-solving, and record-management skills, with demonstrated attention to detail.
- Ability to manage multiple priorities, coordinate activities across stakeholders, and work effectively both independently and as part of a team.
- Clear written and verbal communication skills, along with proficiency in Microsoft Office applications; experience with Archer, ProcessUnity, ServiceNow, or similar governance, risk, and compliance platforms is an asset.
When you join our team:
- We’ll empower you to learn and grow the career you want.
- We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
- As part of our global team, we’ll support you in shaping the future you want to see.
The role being advertised is an existing vacancy.
Referenced Salary Location
Toronto, Ontario
Hybrid
Base salary range is expected to be between
$86,100.00 CAD - $136,100.00 CAD
Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual base salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact for the salary range for your location.
Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact for more information about U.S.-specific paid time off provisions.
