Director, Information Security and Risk Management

1 month ago

Candiac, Canada Manulife Full time
Director, Information Security and Risk Management

Manulife is a leading financial services group. We provide financial advice, insurance, as well as wealth and asset management solutions for individuals, groups and institutions.

This role offers the opportunity to lead our information security and risk management efforts as the Director of Information Security and Risk Management. By developing and implementing a comprehensive vulnerability management program, updating security policies, and driving security awareness initiatives, you will directly contribute to our mission of maintaining a secure and compliant IT environment. In return, you will benefit from a competitive salary, professional growth opportunities, and a supportive, flexible work environment that values well-being and inclusion.

Position Responsibilities:
  1. Lead the development and implementation of a comprehensive vulnerability management program.
  2. Assist IT leads in facilitating management response and remediation efforts.
  3. Ensure overall IT compliance with regulatory requirements through proactive planning, communication, ownership, and relationships.
  4. Review and update information security policies and standards.
  5. Develop and implement security awareness programs to educate IT departments about new standards, security best practices, emerging threats, and mitigation strategies.
  6. Guide engineering and development teams to ensure a secure software development lifecycle (SDLC). Assist in defining and implementing gatekeeping measures, improving release management processes, and increasing compliance rates.
Required Qualifications:
  1. Minimum of 10 years of experience in information security and risk management, with at least 5 years in a leadership role.
  2. Proficiency in vulnerability management, security policy development, security awareness, application security, global security initiatives, and cloud security.
  3. Bachelor’s degree in Information Security, Computer Science, or a related field; advanced degree preferred.
  4. Relevant certifications such as CISSP, CISM, CRISC, or equivalent.
Preferred Qualifications:
  1. Previous experience in a similar role.
  2. Deep understanding of information security frameworks and standards (e.g., ISO 27001, NIST, PCI).
  3. Strong analytical and problem-solving skills.
  4. Excellent communication and leadership skills.

When you join our team:

  1. We’ll empower you to learn and grow the career you want.
  2. We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
  3. As part of our global team, we’ll support you in shaping the future you want to see.

Manulife is an Equal Opportunity Employer. At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies.

Primary Location: Toronto, Ontario

Working Arrangement: Hybrid

Salary range is expected to be between $107,730.00 CAD - $200,070.00 CAD. If you are applying for this role outside of the primary location, please contact recruitment@manulife.com for the salary range for your location. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence.

#J-18808-Ljbffr

  • Chief Information Security Strategist, Risk Management

    1 week ago

    Candiac, Quebec, Canada Manulife Full time

    Job OverviewWe are seeking a seasoned Cyber Security and Risk Management Director to lead our organization's information security strategies. This pivotal role demands expertise in risk management, cybersecurity, and compliance to drive continuous improvement in our security practices.

  • Risk Management Leader

    1 month ago

    Candiac, Quebec, Canada Manulife Full time

    Director of IRM Assurance COE ExecutionManulife, a leading financial services group, offers an exciting opportunity for a Director of IRM Assurance COE Execution. This role provides strategic leadership and oversight of risk management activities within the organization.About the Role:This position ensures that risk is managed effectively by executing 2nd...

  • Director, Cyber Security and Risk Management

    3 weeks ago

    Candiac, Canada Manulife Full time

    Director Strategy Information Security and Risk ManagementManulife is a leading financial services group. We provide financial advice, insurance, as well as wealth and asset management solutions for individuals, groups and institutions.This role offers an exceptional opportunity to lead and shape our information security and risk management strategies as the...

  • Senior Information Security and Compliance Manager

    2 weeks ago

    Candiac, Quebec, Canada Manulife Full time

    Company Overview:Manulife is a leading financial services group providing comprehensive financial advice, insurance, and wealth management solutions. Our mission is to maintain a secure and compliant IT environment.We're seeking a seasoned information security professional to lead our risk management efforts as the Director of Information Security and Risk...

  • Strategic Information Security Leader

    4 weeks ago

    Candiac, Quebec, Canada Manulife Full time

    Director, Information Security and Risk ManagementWe are a leading financial services group providing comprehensive solutions for individuals, groups, and institutions.This role offers the opportunity to lead our information security and risk management efforts as the Director of Information Security and Risk Management. By developing and implementing a...

  • Risk Management Specialist

    2 weeks ago

    Candiac, Quebec, Canada CIBC Full time

    Security Expertise in DemandCIBC seeks a skilled Risk Management Specialist to join our growing information security group. In this role, you will conduct third-party due diligence assessments to identify potential risks and provide recommendations for enhancing our information security landscape.As a seasoned professional in Information Security, you will...

  • Cloud Security Architect and Risk Manager

    4 weeks ago

    Candiac, Quebec, Canada Scotiabank Full time

    The Director, Cloud Security will lead and oversee Cloud Security within Global Risk Management globally ensuring business strategies, plans and initiatives are executed and delivered in compliance with governing regulations, internal policies, procedures with an understanding of industry frameworks/regulations/standards like CSA STAR, ISO, NIST, OWASP, OSFI...

  • Information Technology Risk Manager

    2 weeks ago

    Candiac, Canada RBC Full time

    Are you a talented, creative and results-driven professional who thrives on delivering high-performing applications? Come join us!Global Functions Technology (GFT) is part of RBC’s Technology and Operations division. GFT’s impact is far-reaching as we collaborate with partners from across the company to deliver innovative and transformative IT solutions....

  • Information Risk and Security Engineer

    2 weeks ago

    Candiac, Canada Scotiabank Full time

    Information Security Engineer (Cryptographic Operations)Requisition ID: 211887Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.Cryptographic Operations is a unit within Scotiabank’s Information Security & Control (IS&C) that provides services including HSM engineering, key and secret management,...

  • Director, Finance and Risk Management

    2 months ago

    Candiac, Canada Manulife Full time

    h3>ManulifeManulife is a leading financial services group. We provide financial advice, insurance, as well as wealth and asset management solutions for individuals, groups and institutions.The Director of IRM Assurance COE Execution provides a strategic opportunity to lead and assess risk management activities within our organization. This role ensures that...

  • Chief Information Security and Digital Risk Officer

    3 days ago

    Candiac, Canada GeoComply Full time

    h3>GeoComplyGeoComply provides geolocation compliance, fraud prevention, and cybersecurity solutions that detect location fraud and verify a customer’s true digital identity.At the heart of it all is the people, united by a deep commitment to problem-solving and revolutionizing how people and businesses use the internet to instill confidence in every...

  • Risk Management Specialist, IT Security

    4 weeks ago

    Candiac, Quebec, Canada Manulife Full time

    About the RoleManulife is a leading financial services group that offers a wide range of solutions for individuals, groups, and institutions. As a Manager, Risk Management, you will be part of the Vendor Information Risk Management team.Key ResponsibilitiesConduct information security risk assessments for new and existing vendors, reviewing IT Controls,...

  • Director, Disability Management

    1 month ago

    Candiac, Canada Manulife Full time

    h3>Director, Information Security and Risk ManagementManulife is a leading financial services group. We provide financial advice, insurance, as well as wealth and asset management solutions for individuals, groups and institutions.This role offers the opportunity to lead our information security and risk management efforts as the Director of Information...

  • Risk Management Director

    2 weeks ago

    Candiac, Quebec, Canada Manulife Full time

    Manulife: Leading Financial Services GroupWe provide financial advice, insurance, and wealth management solutions for individuals and institutions. As a Director of IRM Assurance COE Execution, you will lead risk management activities and ensure effective execution of 2nd line assurance assessments.Develop and execute the annual risk assessment plan.Scope...

  • Cloud Security Director

    1 month ago

    Candiac, Quebec, Canada Scotiabank Full time

    **Job Summary**We are seeking a seasoned Cloud Security Director to lead our cloud security efforts globally. As a key member of our Global Risk Management team, you will be responsible for overseeing cloud security and ensuring compliance with regulatory requirements.**Key Responsibilities** Develop and implement cloud security strategies to protect our...

  • Chief Security Strategist, Manulife

    2 weeks ago

    Candiac, Quebec, Canada Manulife Full time

    Secure Our FutureManulife, a leading financial services group, seeks an exceptional Director of Cyber Security and Risk Management to lead our information security and risk management strategies. Reporting to the Information Security and Risk Management Officer, you will collaborate with the Global Risk and Security team to align cybersecurity plans with...

  • Technology Risk Management Professional

    2 weeks ago

    Candiac, Quebec, Canada RBC Full time

    We are seeking a skilled and experienced Technology Risk Management Professional to join our team at RBC. In this role, you will play a critical part in managing and providing subject matter expertise on technology risk control and advisory services to Finance IT and CFO Group management.ResponsibilitiesManage and assess IT & operational risks across a large...

  • Director, Cloud Security

    1 month ago

    Candiac, Canada Scotiabank Full time

    Requisition ID: 210242Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.The Director, Cloud Security will lead and oversee Cloud Security within Global Risk Management (GRM) globally ensuring business strategies, plans and initiatives are executed and delivered in compliance with governing regulations,...

  • Risk Management Leader for Enterprise Assurance

    3 days ago

    Candiac, Quebec, Canada Manulife Full time

    ManulifeWe are a leading financial services group, offering advice, insurance, and wealth management solutions.About the RoleThe Director of IRM Assurance COE Execution is a strategic leadership position that enables effective risk management across our organization.This role entails executing second-line assurance assessments on first-line control design...

  • Cloud Security Expert for Technology Risk Management

    4 weeks ago

    Candiac, Quebec, Canada CIBC Full time

    Job DescriptionWe are seeking a skilled Cloud Security Expert to join our Technology Risk Management team at CIBC.About the Role:Lead and contribute to the development and execution of the annual Audit Plan for Technology risk, focusing on cloud security.Provide consultation to other Internal Audit teams and train, guide, and mentor auditors in areas of...