Manager / Senior Manager - Information Risk Management

The position requires good understanding of technology and information security risks and controls, disaster recovery, and solid communication, presentation and influencing skills. This position will operate across multiple markets and their businesses, functions, and geographies, to promote and enhance awareness of risks and controls.

Position Responsibilities:

1. Strategy execution and planning support 

• Execute agreed AIRM strategic priorities, annual plans and roadmap activities under the direction of the Director and AIRM leadership, ensuring deliverables remain aligned with agreed objectives and timelines.
• Provide planning and administrative support for strategy and business reviews, including scheduling, information gathering, document preparation, consolidation of inputs and action tracking.
• Plan and coordinate AIRM engagement activities, including offsite activities, team meetings, leadership sessions, workshops, knowledge-sharing sessions and recognition activities.
• Coordinate onboarding and team integration activities that help colleagues understand AIRM priorities, ways of working and key stakeholders. 
• Promote collaboration and connectivity across AIRM teams, locations and risk domains.

2. Governance and committee management coordination

• Coordinate AIRM governance forums, including the Asia Information Risk Committee (AIRC), through forward agenda planning, preparation and quality review of materials, meeting support, and tracking of decisions and actions. 
• Prepare clear decision papers, briefing notes and governance materials that set out the issue, risk implications, options, dependencies and recommended action. 
• Maintain governance artefacts, mandates, calendars, decision logs and action trackers, and follow up with accountable owners to support timely closure. 

3. Executive reporting, risk analytics and management information 

• Coordinate quarterly and ad hoc Asia information risk reporting, working with risk owners and subject matter experts to obtain complete, accurate and timely inputs. 
• Produce concise, decision-oriented reporting for senior management and committees, covering risk exposure, control effectiveness, incidents, issues, remediation, delivery status and emerging themes. 
• Apply consistent data definitions, ownership, quality checks and reporting standards, and challenge material gaps or inconsistencies before submission. 
• Provide trend analysis, forward-looking insights and practical recommendations rather than status reporting alone. 
• Support the development and improvement of dashboards, including opportunities to use Power BI and workflow automation to reduce manual effort and improve transparency. 

4. Second-line risk oversight and advisory 

• Provide second-line Information Risk Management (IRM) oversight of first-line defense activities related to change management, third-party risk, incident response, business continuity, and disaster recovery, ensuring alignment with the internal IRM framework.
• Monitor material risk themes, issues, exceptions and remediation progress, and escalate concerns through the appropriate governance route, in accordance with IRM standards.
• Deliver market-specific risk insights and advisory support to stakeholders, and guide market teams on global IRM initiatives and ensure local alignment.

Required Qualifications:

• Holds a Bachelor's degree or equivalent qualification in Information Technology, Information Security, Risk Management, or a related discipline.
• Minimum 3 – 5 years of relevant experience in information risk management or information security management.
• Sound technology background with risk management sense.
• Broad knowledge of financial services/insurance business and related products.
• Solid written and oral communication and presentation skills.
• Detail-oriented with good analytical, critical thinking and problem-solving skills with the ability to think strategically.
• Solid influencing skills with the ability to build effective relationships, both within and across divisions.

Preferred Qualifications:

• Professional designation, e.g. CISSP, CRISC, CISA, CSSLP, or CISM would be an advantage.
• High proficiency in data analytics tools such as PowerBI is a PLUS.

When you join our team:

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].

Hybrid