Information Risk Management Senior Consultant

Manulife is hiring an Information Risk Management Senior Consultant for a hybrid role in Toronto, Ontario. The role provides information risk and security guidance, including business continuity and disaster recovery oversight, to business units and technology teams.

• Partner with business and IT teams on information security activities, policies, and risk initiatives.
• Assess information risks in on-premises, IaaS, PaaS, SaaS, and generative AI projects, and ensure controls are considered early in project and software development life cycles.
• Apply the organization’s information risk assessment methodology, policies, and standards.
• Develop risk management strategies, provide security consulting, and track issues and corrective action plans through resolution.
• Support operational security processes, including incident response, vulnerability management, and firewall reviews.
• Respond to audits and regulatory reviews, and advise stakeholders on security requirements and best practices.
• Support business continuity and disaster recovery activities to help recover critical processes.

• At least five years of experience in information risk management, vendor risk management, project risk management, IT audit, or IT controls assessment.
• Bachelor’s degree or equivalent.
• CISSP, CRISC, CISM, CISA, or another relevant designation is an asset.
• Knowledge of frameworks and requirements such as NIST, ISO 27001, GDPR, Sarbanes-Oxley, and the EU AI Act.

Expected salary range: $113,000–$163,000 CAD per year. Eligible employees may also participate in incentive programs and receive customizable benefits.