VP, Operational Risk Oversight

2 days ago

Toronto, Ontario, Canada Manulife/John Hancock Full-time

Position Responsibilities:

  • Delivering information risk expertise and advice to the business users enabling them to manage their Resilience & Crisis response risks efficiently and effectively.
  • Managing the Resilience & Crisis risk team and function with direct reports in multiple locations with responsibility for all staffing decisions related to this team.
  • Adjusting and setting risk commitments within the team.
  • In a changing environment, constantly reviewing and balancing the team’s business-as-usual commitments with short-term/immediate priorities and long-term strategic initiatives.
  • Completing short-term planning and creating long-term strategy that will mature information risk capabilities ensuring the practices keep pace with both internal drivers (company strategy and goals) and external drivers (technology, regulations, threats, vulnerabilities, etc.).
  • Fostering and maintaining a talent pipeline to ensure staff openings and hiring are managed proactively; devising training paths and development plans to ensure skills within the team are fostered and strengthened to meet both the current and anticipated demand; maintaining and if appropriate attaining new certifications.
  • Anticipating the needs of skills, knowledge, and tools for their team.
  • Being responsible and accountable for team budget and spending.
  • Staying abreast of new regulations, laws, and requirements for relevant risks across jurisdictions and overseeing compliance with same as required.
  • Ensuring staff are properly trained and keep current with information risk and resilience developments, and technology (both in use at Manulife and across the industry).
  • Interacting with and cooperating with information risk teams globally ensuring uniform processes and compliance with Global Information Risk Management processes, procedures, policies, standards, templates, and guidelines.
  • Maintaining and fostering enduring relationships with internal customers namely: Executives and other staff within business lines project managers, developers, and others.
  • Executives and peers within the wider Information Risk Management community executives and others within other second- and third-line of defense teams (Audit Services, Operational Risk, Compliance, Investigative Services, Enterprise Risk, etc.)
  • Leading the Global ORM function and supporting the Head of Technology, Operational and AI Risk in overseeing operational risk across the Company.
  • Leading the implementation of the Company's enterprise-level ORM program and ensuring the program adds value to the organization and is aligned with regulatory expectations and industry practices.
  • Responsible for driving operational risk transformation towards an effective and efficient integrated model with overall operations.
  • Reimagine and lead with a strategic lens.
  • Drive and implement strategic and global operational initiatives to support business goals.
  • Lead talent transformation to attract and retain highly skilled individuals.
  • Ensuring core program elements are appropriately designed and implemented including the following: Company's ORM Framework document and Operational Risk Policy and Standards.
  • Risk Appetite for Operational Risk.
  • Risk and Control Assessment program.
  • Operational incident data collection database and related processes.
  • ORM scenario and stress testing program.
  • Evaluating operational risk on significant projects/programs, new/revised products, and M&A transactions.
  • Key risk indicator tracking; Operational risk reporting including quarterly dashboard.
  • Leading the development and implementation of ORM supporting technology (i.e. Archer).
  • Responsible for communication and reporting requirements related to the ORM Program including the following: Supporting the Operational Risk Committee to facilitate its effective operation and oversight of enterprise level operational risk.
  • Acting as the key point of contact for discussions with Manulife's primary regulator (OSFI)and other regulators as appropriate.
  • Act as an ambassador for the ORM program across the Company.
  • Ensuring appropriate communication of the program's benefit and requirements to generate the required organizational support.
  • Collaborating with other global functional groups to ensure other specific operational risk programs are integrated into the ORM program.
  • Keeping abreast of industry developments, best practices and trends in ORM.
  • This includes monitoring international developments as they pertain to operational risk and future requirements that may be established by OSFI, or other regulators.
  • Need to collaborate extensively with other Global functions and segments to enhance and implement the ORM program.
  • Effectively communicate requirements and