BU Security Lead – Cloud & Application Risk

Manulife; Southwestern Ontario; Hybrid; CAD 86,000 - 136,000; Full time

Job summary

Manulife is seeking a seasoned security professional to join our Canadian Segment Security Technology Team in Waterloo. You will perform risk assessments for cloud and on-premises technologies, ensure security controls in DevOps pipelines, and sign off on application security measures across the SDLC.

In this role you will collaborate with engineering, architecture and business teams, stay current on threats, and help drive continuous improvement while supporting regulatory and audit

Qualifications

• Experience in cloud security, application security, and data protection.
• 5+ years in IT/Information Risk management and security disciplines.
• Deep knowledge of cloud computing security (IaaS/PaaS/SaaS).
• Familiarity with security frameworks and regulatory requirements.
• Excellent business communication to lead discussions across levels.

Responsibilities

• Conduct comprehensive risk assessments of technology systems, applications, and infrastructure to identify threats, vulnerabilities, and impacts on business operations.
• Review and sign off on application security during the SDLC and ensure security tests in DevOps pipelines.
• Collaborate with business, engineering, and architect teams to integrate security into workflows.
• Provide domain expertise in security incident investigations and response; ensure peer-reviewed assessments.
• Deliver training on IRM processes and respond to audits and regulatory reviews.

Skills

Cloud security

Application security

Data protection

DevOps security

Threat modeling

Information risk management

Cloud computing security (IaaS/PaaS/Sa

Regulatory standards knowledge

Security frameworks

Communication & collaboration

Education

Background in Computer Science / IT / Software Engineering / Business Administration

Professional designations: CISSP / CRISC / CISM / CISA / GSEC

Tools

DevOps pipelines

Security testing methodologies

Job description

Manulife is seeking a seasoned security professional to join our Canadian Segment Security Technology Team in Waterloo. You will perform risk assessments for cloud and on-premises technologies, ensure security controls in DevOps pipelines, and sign off on application security measures across the SDLC.

In this role you will collaborate with engineering, architecture and business teams, stay current on threats, and help drive continuous improvement while supporting regulatory and audit