Information Risk Management Senior Consultant

Manulife is hiring an Information Risk Management Senior Consultant for a hybrid role in Toronto, Ontario. The role provides information risk and security guidance, including business continuity and disaster recovery oversight, to business units and technology teams.

Responsibilities

Partner with business and IT teams on information security activities, policies, and risk initiatives.

Assess information risks in on-premises, IaaS, PaaS, SaaS, and generative AI projects, and ensure controls are considered early in project and software development life cycles.

Apply the organization’s information risk assessment methodology, policies, and standards.

Develop risk management strategies, provide security consulting, and track issues and corrective action plans through resolution.

Support operational security processes, including incident response, vulnerability management, and firewall reviews.

Respond to audits and regulatory reviews, and advise stakeholders on security requirements and best practices.

Support business continuity and disaster recovery activities to help recover critical processes.

Qualifications

At least five years of experience in information risk management, vendor risk management, project risk management, IT audit, or IT controls assessment.

Bachelor’s degree or equivalent.

CISSP, CRISC, CISM, CISA, or another relevant designation is an asset.

Knowledge of frameworks and requirements such as NIST, ISO 27001, GDPR, Sarbanes-Oxley, and the EU AI Act.

Compensation
Expected salary range: $113,000–$163,000 CAD per year. Eligible employees may also participate in incentive programs and receive customizable benefits.