Manager, Information Risk Management

Job description

We’re looking for a Manager, Information Risk Management to join our Governance, Risk and Compliance team at MBPS. In this role, you are expected to provide independent second-line oversight and challenge across technology, data, and operational risk, helping ensure that risk practices are aligned with established standards, risk appetite, and regulatory expectations.

Position Responsibilities

Provide independent second-line oversight and constructive challenge of first-line risk assessments, control designs, remediation strategies, risk decisions, and supporting evidence. Perform oversight across key risk programs, including Risk and Control Self-Assessments (RCSAs), third-party risk, initiative and change risk, incidents and reportable events, issue management, risk acceptances, corrective action plans, and BCM/DR.

Analyze complex technology, data, cybersecurity, cloud, infrastructure, and operational resilience risks to identify gaps, emerging themes, systemic issues, and areas requiring escalation. Develop clear, evidence-based second-line risk opinions and communicate findings, recommendations, and risk insights to senior leaders and key stakeholders. Support the continued evolution of risk oversight through data analysis, automation, continuous monitoring, and emerging technologies such as Generative AI and Agentic AI.

Required Qualifications

At least 6 years of relevant experience in Information Risk, Technology Risk, Cyber Risk, Governance, Risk and Compliance (GRC), Internal Audit, or Operational Risk. Demonstrated experience performing independent second-line oversight, challenge, or audit-style reviews, with the ability to objectively assess first-line risk activities. Strong working knowledge of technology and information risk, including areas such as technology, data, cloud, infrastructure, cybersecurity, and operational resilience.

Experience across multiple risk disciplines, such as RCSA, third-party risk, issue and corrective action management, risk acceptances, incidents and events, BCM/DR, or change risk. Strong analytical, written, and verbal communication skills, with the ability to evaluate complex risk scenarios, develop well-supported risk opinions, and constructively challenge senior stakeholders.

Preferred Qualifications

Familiarity with GRC platforms such as Archer, ServiceNow, or Fusion. Knowledge of industry frameworks and standards such as NIST, ISO, COBIT, and CSA/CCM. Professional certifications such as CISA, CRISC, CISSP, or CISM are considered an asset. Exposure to Generative AI, Agentic AI, automation, or continuous monitoring technologies within a risk or governance environment. Strong professional judgment, intellectual curiosity, and the ability to engage and influence senior leaders and subject-matter experts while maintaining independence and objectivity.

When you join our team

We’ll empower you to learn and grow the career you want. We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words. As part of our global team, we’ll support you in shaping the future you want to see. About Manulife and John Hancock Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better.

To learn more about us, visit https://www.manulife.com/en/about/our-story.html . Manulife is an Equal Opportunity Employer At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected] .

Working Arrangement Hybrid