Senior Information Risk ConsultantProtect What Matters MostJoin Manulife's
Global Wealth & Asset Management (GWAM) Information Risk Team, where you'll play a critical role in safeguarding business initiatives, emerging technologies, and cloud-based solutions. As a trusted advisor and risk professional, you'll help ensure security and risk management principles are embedded into technology decisions from design through implementation.
This is an exciting opportunity for an experienced information security professional who thrives at the intersection of
cybersecurity, cloud technologies, risk management, and business enablement.
What You'll Do- Lead information risk assessments for technology initiatives, cloud solutions, and IT projects.
- Identify cybersecurity risks, threats, and vulnerabilities, and recommend practical mitigation strategies.
- Partner with business, technology, architecture, and project teams to ensure security controls are embedded early in the solution lifecycle.
- Advise stakeholders on information security requirements, risk management practices, and regulatory expectations.
- Design, document, and evaluate security controls for cloud and on-premises environments.
- Support audits, regulatory reviews, control assessments, and risk management activities.
- Deliver training and guidance to stakeholders on information risk assessment processes and cybersecurity best practices.
- Help foster a strong security culture by influencing risk-aware decision-making across the organization.
What You BringRequired Qualifications- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 5+ years of experience in Information Security, Cybersecurity, or Information Risk Management.
- Experience conducting security assessments, risk evaluations, IT controls reviews, or audit activities.
- Strong understanding of cloud security and IaaS, PaaS, and SaaS environments.
- Knowledge of cybersecurity frameworks and standards, including:
- NIST Cybersecurity Framework (CSF)
- ISO 27001
- CIS Controls
- Understanding of AI fundamentals, principles, and emerging technologies.
- Excellent communication, facilitation, and stakeholder management skills.
- Strong analytical, problem-solving, and organizational abilities.
Professional Certifications (Preferred)- CISSP
- CISM
- CRISC
- CISA
- CCSP
- GSEC
Preferred Experience- Financial services, wealth management, or asset management industry experience.
- Information risk management, vendor risk management, project risk management, or IT audit expertise.
- Experience supporting cloud transformation and cybersecurity initiatives.
- Ability to influence stakeholders and drive a strong risk management culture across complex organizations.
The role being advertised is an existing vacancy.Referenced Salary LocationToronto, Ontario
Working ArrangementHybrid
Salary range is expected to be between$113,000.00 CAD - $163,000.00 CAD
Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact [redacted] for the salary range for your location.
Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact [redacted] for more information about U.S.-specific paid time off provisions.
