Security and Risk Officer

**_Are you looking for a supportive, collaborative workplace with great teams and inspiring leaders? You’ve come to the right place. We’re looking for ambitious people who share our values and want to make every day better for people around the world. If this sounds like you, and the career below sounds exciting, we’d like to hear from you. _**

**Working Arrangement**

Hybrid

**Overview**:
We are seeking a versatile Security and Risk Officer professional to join our Governance and Control Team. You will join an outstanding company known for its dedication to diversity, community involvement and work-life balance via the WorkSmart program. You will help drive an industry leading Information Security and Technology Risk Management program, leading the security assessments of multiple business-critical Value Streams and initiatives.

**Responsibilities**:
**Responsibilities include**:

- Performs the security and control assessments to identify key risks and gaps, and to facilitate the development and tracking of management action plans as the need arises.
- Provide information security and risk expertise to Canadian Segment Technology to improve risk-based decision-making:

- Identify and recommend key controls for key security and technology risks
- Recommend mitigation strategies
- Promoting a strong information risk environment.
- Interacting and cooperating with information risk teams globally ensuring uniform processes and compliance with Global Information Risk Management processes, procedures, policies, standards, templates, and guidelines.
- Providing 1st line risk assessments (projects and vendors) as the need arises. Work with senior management to ensure their informed consent and understanding of risk treatments.
- Review and supervise the Canadian Segment Technology audit findings and their action plans.
- Lead Value Streams independent assessments and perform sample controls testing.
- Provide a coordinated view of information risk exposures across the Canadian segment Business units by collaborating with GIRM COE Leads, Global and Divisional Information Services teams, Canadian Segment & Global Privacy and Compliance, Operational Risk Management and Audit Services.

**Required Skills**:

- Bachelor’s degree (Business, Computer Science or related field required) or equivalent experience.
- 5+ years multifaceted experience in a large, global organization, experience within financial services or insurance industry required.
- Knowledge of the regulatory environments in Canada.
- Professional certification CISSP, CISA, CRISC or similar credentials
- Experience implementing controls to meet some or all the following frameworks and standards: ISO 27001/2, NIST, PCI DSS, etc.
- Achievement oriented with validated leadership skills and the ability to work both independently and as part of a team, balancing multiple priorities and target dates.
- Good communicator and active listener with the ability to optimally articulate vision, possibilities, and outcomes.

**What can we offer you?**
- A competitive salary and benefits packages.
- A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.
- A focus on growing your career path with us.
- Flexible work policies and strong work-life balance.
- Professional development and leadership opportunities.

**Our commitment to you**
- Values-first culture
We lead with our Values every day and bring them to life together.
- Boundless opportunity
We create opportunities to learn and grow at every stage of your career.
- Continuous innovation
We invite you to help redefine the future of financial services.
- Delivering the promise of Diversity, Equity and Inclusion
We foster an inclusive workplace where everyone thrives.
- Championing Corporate Citizenship
We build a business that benefits all stakeholders and has a positive social and environmental impact.

**About John Hancock and Manulife**

**Manulife is an Equal Opportunity Employer