Senior Manager

**_Are you looking for a supportive, collaborative workplace with great teams and inspiring leaders? You’ve come to the right place. We’re looking for ambitious people who share our values and want to make every day better for people around the world. If this sounds like you, and the career below sounds exciting, we’d like to hear from you. _**

**Working Arrangement**

Hybrid

**The Opportunity**

The Senior Manager, IRM, Asia, is the Asia IRM team sits in the 2nd line of defense, and is responsible for the information risk oversight in the Asia segment, in alignment with the mandates and objectives of the Asia segment, as well as Globally. The individual will collaborate and liaise with market Information Services, Risk Management and Business Units, participate in the 2nd line oversight structure in order to support the implementation of IRM strategy; and provide consultation and support on the IRM activities for the successful implementation of the IRM strategy. The role reports to the Senior Director, IRM, Asia.

**What motivates you?**
- You obsess about customers, listen, engage and act for their benefit
- You think big, with curiosity to discover ways to use your agile mindset and enable business outcomes
- You thrive in teams, and enjoy getting things done together
- You take ownership and build solutions, focusing on what matters
- You do what is right, work with integrity and speak up
- You share your humanity, helping us build a diverse and inclusive work environment for everyone

**We are looking for someone with**:

- Holds a Bachelor Degree mínimally
- 5 years of IT experience of which 3 years are in Information Risk and Security Management.
- Excellent communication skills in both technical and non-technical areas.
- Technical and operational expertise to validate assurance evidence correctly aligns with required controls and completely covers required scope.
- Appreciation of different cultures.

**Nice to Haves**:

- Deep, demonstrated domain experience in a combination of the following information risk capabilities:

- Information Risk Assessment/Threat Modelling
- IT Security Controls implementation
- Policy/Standards/Controls
- Vendor Information Risk Management
- Formal Audit of Information Risk controls
- Privacy/regulatory
- Business continuity/DR (Availability)
- Information Security tools and practices
- Application Security (An advantage)
- Holder of Professional Certificate CISSP, CRISC, CISA, CSSLP and or CISM would be an advantage.

**On the job you will**:

- Understand Information Risk Management/Information Security policies and standards and associated security controls especially in the Information Security Management ISM, Technology Risk Management TRM and Business Continuity Management BCM domains.
- Understand organizational capabilities and the gaps in meeting regulations/security trends/policies/standards.
- Provide advisory and guidance on Information Risk, Technology Risk and Regulatory for information services and business.
- Support IRM activities that includes but not limited to Process Risk Control Self Assessment (RCSA), Technical RCSA, Exception Request (ER), issue and correct action plan (CAP) advisory.
- Assist market to evaluate their information risk posture by prepare reports and agree the risk rating with market.
- Provide risk oversight for the initiatives/projects and monitor the progress of the high touch projects.
- Review critical IT incidents to provide advisory and ensure the control are being implement effectively.

**Our commitment to you**
- Our mission; to be a part of making Decisions Easier and Lives Better
- A leadership team dedicated to your growth and success
- A bold ambition and set of goals to be a leader in driving transformation in our industry
- Our best. Every day.

**About John Hancock and Manulife**

**Manulife is an Equal Opportunity Employer