Director, Vendor Information Risk Management

Manulife Insurance Malaysia; Toronto; Hybrid; CAD 103,000 - 186,000; Full time

Job summary

A leading financial services company in Toronto seeks a Director for Vendor Information Risk Management. This role involves leading IS risk assessments for vendors and collaborating on risk management strategies. The ideal candidate will have 5-7 years of IT experience, with a strong focus on auditing and compliance. A competitive salary and hybrid working arrangements are offered.

Benefits

Competitive salary and benefits

Flexible work policies

Professional development opportunities

Qualifications

• 5 to 7 years of IT work experience, including 2 to 3 years IT auditing.
• CISA or CRISC preferred.
• Working knowledge of financial services operations.

Responsibilities

• Lead North America IS risk assessments for new and existing vendors.
• Develop and enforce information risk policies and procedures.
• Perform contract reviews with Legal as appropriate.

Skills

Effective communication

Problem-solving

Negotiation skills

Collaboration with vendors

Assertiveness

Education

Bachelor's degree in related field

Tools

Risk assessment methodologies

Compliance frameworks

Job description

Overview

Director, Vendor Information Risk Management

Location: Toronto, Ontario

Time Type: Full-time

Posted On: 4 days ago

Application Deadline: October 30, 2024 (9 days left to apply)

The Opportunity

As the Director, Vendor Information Risk Management, you will lead the Vendor Information Risk Management team to conduct suppliers’ assessments on information security controls. In this role, you will oversee the IS risk assessment for North America and serve as a Business Matter Expert in identifying, quantifying, and measuring IS risks.

This is a people leader position based out of the Toronto, ON office with a hybrid work arrangement (3 days in office).

Responsibilities

• Responsible for the North America IS risk assessments of new and existing vendors working with Category Managers in Procurement, BU contacts and contract owners, BU security officers and business continuity analysts.
• Perform on-site visits of vendors as required.
• Subject matter expert who assists business partners and IT colleagues to identify, quantify then manage their information security risks.
• Assist in the development, maintenance, and implementation of information risk policies and procedures as well as the monitoring processes and measures to enforce those policies.
• Contribute to the development of IS risk processes that support Global Information Risk Management objectives.
• Perform contract reviews with Legal as appropriate.
• Be part of an active team who remains current on emerging risks and technologies, key developments, and strategies for the businesses you support. Keep abreast of new thoughts, tools, and approaches.
• Participate in key projects and initiatives ensuring information risk is always considered and managed.
• Recommends risk management approaches to business that balance business needs with known risk tolerances.

How will you create impact?

This role significantly enhances the organization’s security posture by conducting due diligence on New and Existing Vendors. It directly bolsters security controls / resilience and safeguards with the Vendors.

What motivates you?

• You obsess about customers, listen, engage, and act for their benefit.
• You think big, with curiosity to discover ways to use your agile approach and enable business outcomes.
• You thrive in teams and enjoy getting things done together.
• You take ownership and build solutions, focusing on what matters.
• You do what is right, work with integrity and speak up.
• You share your humanity, helping us build a diverse and inclusive work environment for everyone.

What we are looking for

• Bachelor's degree in related field.
• 5 to 7 years of IT work experience, including 2 to 3 years IT auditing or equivalent experience.
• CISA or CRISC preferred.
• Working knowledge of financial services and technology operations.
• Proven experience in technology audit, risk and / or compliance.
• Effective communication, presentation, negotiation and influencing skills.
• Identifies problems, proposes then executes solutions.
• Communicates in a manner that is easily understood and actionable.
• Assertiveness in a team environment.
• Collaborates with key vendors, partners, and other teams.
• Assumes ownership for deliverables and goals.
• Improves current processes adding value and efficiencies.
• Provides and exhibits an expert understanding of specific technical concepts and solutions.
• Researches and investigates independently new issues and innovations to maintain currency of technical expertise.
• Excellent organization and planning abilities.
• Solid communication skills both written and oral.
• Experience managing audit / compliance.
• Understanding of controls, audit, and risk management.

What can we offer you?

• A competitive salary and benefits packages.
• A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.
• A focus on growing your career path with us.
• Flexible work policies and strong work-life balance.
• Professional development and leadership opportunities.

Our commitment to you

• Values-first culture : We lead with our Values every day and bring them to life together.
• Boundless opportunity : We create opportunities to learn and grow at every stage of your career.
• Continuous innovation : We invite you to help redefine the future of financial services.
• Delivering the promise of Diversity, Equity and Inclusion : We foster an inclusive workplace where everyone thrives.
• Championing Corporate Citizenship : We build a business that benefits all stakeholders and has a positive social and environmental impact.

About Manulife and John Hancock

Manulife Financial Corporation is a global leader in financial services that helps people make decisions more easily and live better. To learn more about us, visit www.manulife.com.

Manulife is an equal opportunity employer

At Manulife / John Hancock, we embrace our diversity. We strive to attract, develop, and retain a workforce that is as diverse as our customers, and to foster an inclusive workplace that leverages the diversity of our employees and their skills. We are committed to ensuring equitable recruitment, retention, promotion, and compensation practices, and we administer all our practices and programs without discrimination based on race, ancestry, place of origin, color, ethnic origin, citizenship, religion or beliefs or religious convictions, gender (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other grounds protected by applicable law.

We have prioritized removing barriers to equitable employment access. Therefore, a Human Resources representative will work with candidates who request reasonable accommodation during recruitment. All information disclosed during the accommodation request process will be stored and used in accordance with applicable laws and policies of Manulife / John Hancock.

Main Region

Toronto, Ontario

Compressed Work Week

Hybrid

The salary range is expected to be between

103,050.00 CAD - $185,490.00 CAD

If you are applying for this position outside the main region, please write to [e-mail] for the salary range applicable to your region. Salary varies based on local market conditions, geography, and relevant job factors such as knowledge, skills, qualifications, experience, and education or training. Employees also have the opportunity to participate in incentive programs and receive performance-related compensation linked to company and individual performance.

Manulife offers eligible employees a wide range of customizable benefits, including medical, dental, mental health, vision, short- and long-term disability, life insurance, adoption, surrogate and non-urgent medical care, as well as employee and family assistance programs. We also offer eligible employees various retirement savings plans (including pension plans and an international employee stock purchase program with employer matching contributions) and resources for financial education and counseling. Our generous paid leave program in Canada includes holidays, annual leave, personal leave, and sick leave, and we offer the full range of legislated leave entitlements. If you are applying for this position in the United States, please write to [e-mail] for more information on the specific paid leave provisions in the United States.

J-18808-Ljbffr