Senior Manager, Information Risk Management Control Assurance Testing (ICAT)

We are a leading financial services provider committed to making decisions easier and lives better for our customers and colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. To help us stand out, we help you step up, because when colleagues are healthy, respected and meaningfully challenged, we all thrive. Discover how you can grow your career, make impact and drive real change with our Winning Team today. 

Hybrid

Job Description

The opportunity

The Senior Manager, Information Risk Management Control Assurance Testing (ICAT) will play a vital role in the 2nd Line of Defense global ICAT team responsible for assessing the information risk management activities to provide independent and objective control assurance against the company’s information risk appetite.

Key Responsibilities

• Perform information risk assurance assessments and controls testing according to the company’s policies and standards, e.g. Identity and Access Management, vulnerability management, network security, application security, IT asset inventory etc.
• Provide risk management services and advisory initiatives for information and technology risks
• Collaborate with different lines of defense, subject matter expertise, to carry out assurance project planning and keep pace with both internal drivers (IRM standards and Technology processes) and external drivers (technology, regulations, risks, and control standards)
• Ensure that all assurance procedures executed are conducted in accordance with Global IRM Methodologies
• Collaborate with regional, market Information Risk Officers, Governance & Control teams to ensure process assurance of key risks and gaps identified from assurance engagements, and to define, track and report on management corrective action plans
• Develop relationships with teams across the globe, regionally, and locally, e.g. IT, Audit Services, Global Information Risk Management, Operational Risk Management, and other risk and control groups to develop integrated strategies to manage our most key areas of risk
• Commit to and contribute to the ongoing evolution of assurance processes, standardization of procedures, and continuous improvement
• Stay abreast of evolving information and technology risks, as well as new regulations, laws, and requirements for technology, information security, cybersecurity, and privacy across the company's jurisdictions

Job Requirements

• Minimum 5 years of progressive experience in the areas of Information Security / Business Resiliency / Technology Risk strategies, principles, processes, and deliverables within a large enterprise
• University degree in Risk Management, Business Information Systems, Computer Science or related discipline is preferred
• Relevant work experience in financial services and technology operations, e.g. information risk management, or audit function
• In depth knowledge of system development methodologies, cyber and network security processes, and regulatory requirements (CA OSFI, US SOX, JP FSA, HK SFC, SG MAS etc.)
• Sound knowledge of best practices of various aspects of information risk management Previous risk advisory consulting experience is preferred

Competencies

• Fluency in both Japanese and English, including speaking, reading, and writing
• Results oriented with a keen focus on quality and delivering value; ability to balance multiple priorities and projects; strong attention to detail while retaining focus on the “big picture” and top risks; flexible and organized with the ability to oversee multiple projects concurrently
• Strong communication, stakeholder management, and presentation skills
• Problem solving, analytical, innovative, and strategic thinker
• Ability to work independently and effectively collaborate with teammates around the globe
• Ability to quickly comprehend business processes and identify the risk implications, analyze complex situations, reach appropriate conclusions, and make value-added and practical recommendations.
• Recognized professional designations in Information Security, Audit and Business Continuity (e.g., CISSP, CISA, CISM, CEH, CRISC, FAIR)
• Demonstrated ability to work effectively in diverse environments and cultures, over multiple office locations
• Ability to identify opportunities to utilize data analytics for enhanced depth and breadth of assurance coverage

What motivates you?

• You obsess about customers, listen, engage and act for their benefit.
• You think big, with curiosity to discover ways to use your agile approach and enable business outcomes.
• You thrive in teams and enjoy getting things done together.
• You take ownership and build solutions, focusing on what matters.
• You do what is right, work with integrity and speak up.
• You share your humanity, helping us build a diverse and inclusive work environment for everyone.

What can we offer you?

• A competitive salary and benefits packages.
• A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.
• A focus on growing your career path with us.
• Flexible work policies and strong work-life balance.
• Professional development and leadership opportunities.

Our commitment to you

• Values-first culture
  We lead with our Values every day and bring them to life together.
• Boundless opportunity
  We create opportunities to learn and grow at every stage of your career.
• Continuous innovation
  We invite you to help redefine the future of financial services.
• Delivering the promise of Diversity, Equity and Inclusion
  We foster an inclusive workplace where everyone thrives.
• Championing Corporate Citizenship
  We build a business that benefits all stakeholders and has a positive social and environmental impact.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, Canada, we operate as Manulife across our offices in Asia, Canada, and Europe, and primarily as John Hancock in the United States. We provide financial advice, insurance, and wealth and asset management solutions for individuals, groups and institutions. At the end of 2022, we had more than 40,000 employees, over 116,000 agents, and thousands of distribution partners, serving over 34 million customers. At the end of 2022, we had $1.3 trillion (US$1.0 trillion) in assets under management and administration, including total invested assets of $0.4 trillion (US $0.3 trillion), and segregated funds net assets of $0.3 trillion (US$0.3 trillion). We trade as ‘MFC’ on the Toronto, New York, and the Philippine stock exchanges, and under ‘945’ in Hong Kong.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law. 

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].