Consultant, Information Risk

Are you looking for a supportive, collaborative workplace with great teams and inspiring leaders? You’ve come to the right place. We’re looking for ambitious people who share our values and want to make every day better for people around the world. If this sounds like you, and the career below sounds exciting, we’d like to hear from you.

Job Description

The Opportunity

This role is part the Information Risk team, who is the information security control team under Global Wealth Asset Management (GWAM) Information Technology First Line of Defense. The team performs risk-based information security assessments for new technologies and changes to existing IT-based solutions, accountable to identify threats for both the cloud-based and on premises-based infrastructure, platform, and services.:

• Perform GWAM project and technology information risk assessments including assessing risks and define controls as well as tracking the implementation of controls.
• Design, document and/or implement BAU security controls applicable to the cloud-based infrastructure, platform, and services.
• Evaluate products for implementing security controls in the cloud or on-premises spaces.

Key Responsibilities:

• Responsible for the execution of information risk assessment processes in compliance with global Information Risk Assessment methodology.
• Ensure the appropriate steps are taken to ensure the Information Risk Assessment process is followed in integration with other related processes: architecture review, project risk management framework, etc.
• Manage the priorities between the tasks assigned with input from the risk owners.
• Attend project meetings, provide timely updates, advise on risks and impact around the changes.
• Ensure each information risk assessment completed is peer-reviewed & communicated to larger distribution to various stakeholders.
• Provide training to key stakeholders around the information risk assessment processes.
• Respond to audits, regulatory reviews, risk and controls self-assessments.

Job Requirements(Experience/Knowledge/Skills):

• Degree holder of Computer Science, Information Technology, Software Engineering, Business Administration, or relevant educational and professional experience.
• Relevant professional designations (e.g. CISSP, CRISC, CISM, CISA, GSEC).
• 5+ years of experience in a combination of relevant technical disciplines in the field of Information Security: network security, application security, identity and access management, IT operations security, vulnerability management, information protection, physical security, cybersecurity.
• 5+ years of IT/Information Risk management experience: vendor risk management, project risk management, IT audit or IT controls assessment.
• Deep knowledge of cloud computing security and IaaS, PaaS or SaaS environments.
• Knowledge of security frameworks (e.g. ISO 27001, COBIT), regulatory requirements and standards (e.g. NIST, GDPR, Sarbanes-Oxley).
• Strong communication, presentation, and facilitation skills to all levels and audiences.
• Influence behavior to reduce risks and foster a strong information security risk management culture.
• Problem solving, analytical, and innovative mindset.
• Strong team player (collaborative).
• Strong time management and organizational skills to manage multiple tasks and changing priorities.
• Knowledge and understanding of the financial industry is preferred.

Every career at Manulife/John Hancock provides the opportunity to learn new skills and move your career forward. Ready to make an impact somewhere? What are you waiting for? Apply today.

About John Hancock and Manulife

John Hancock is a unit of Manulife Financial Corporation, a leading international financial services group that helps people make their decisions easier and lives better. We operate primarily as John Hancock in the United States, and Manulife globally, including Canada, Asia and Europe. We provide financial advice, insurance and wealth and asset management solutions for individuals, groups and institutions. Assets under management and administration by Manulife and its subsidiaries were CAD$1.3 trillion (US$1.1 trillion) as of June 30, 2021. Manulife Financial Corporation trades as MFC on the TSX, NYSE, and PSE, and under 945 on the SEHK. Manulife can be found at manulife.com .

One of the largest life insurers in the United States, John Hancock supports more than 10 million Americans with a broad range of financial products, including life insurance , annuities , investments , 401(k) plans , and education savings plans . Additional information about John Hancock may be found at johnhancock.com .

Manulife is an Equal Opportunity Employer

At Manulife/JohnHancock, we embrace our diversity. We strive to attract,developandretaina workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment,retention, advancementand compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin,colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers toprovideequal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process.All information shared during the accommodation request process will be stored and used in a manner that is consistent withapplicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contactrecruitment@manulife.com.