Information Risk Management Senior Consultant

Skillhub Solutions Inc.; Toronto; Hybrid; CAD 113.000 - 163.000; Vollzeit

Zusammenfassung

Manulife in Toronto, Ontario, is hiring an Information Risk Management Senior Consultant for a hybrid role. You will provide information risk and security guidance to business units and technology teams, helping ensure risk-informed decisions.

The ideal candidate has 5+ years in information risk management, knowledge of frameworks such as NIST and ISO 27001, and professional designations; salary range CAD 113,000–163,000 per year with incentive programs.

Qualifikationen

• Minimum five years of experience in information risk management, vendor risk management, project risk management, IT audit, or IT controls assessment.
• Bachelor’s degree or equivalent.
• CISSP, CRISC, CISM, CISA, or related designation is a plus.
• Knowledge of frameworks and requirements such as NIST, ISO 27001, GDPR, Sarbanes-Oxley, and the EU AI Act.

Aufgaben

• Partner with business and IT teams on information security activities, policies, and risk initiatives.
• Assess information risks across on‑premises, IaaS, PaaS, SaaS, and generative AI projects.
• Apply the organization’s information risk assessment methodology, policies, and standards.
• Develop risk management strategies, provide security consulting, and track issues and corrective action plans through resolution.
• Support operational security processes, including incident response, vulnerability management, and firewall reviews.
• Respond to audits and regulatory reviews, and advise stakeholders on security requirements and best practices.
• Support business continuity and disaster recovery activities to help recover critical processes.

Kenntnisse

Information risk management

Vendor risk management

IT audit

IT controls assessment

Project risk management

Ausbildung

Bachelor’s degree or equivalent

Jobbeschreibung

Manulife is hiring an Information Risk Management Senior Consultant for a hybrid role in Toronto, Ontario. The role provides information risk and security guidance, including business continuity and disaster recovery oversight, to business units and technology teams.

Responsibilities

• Partner with business and IT teams on information security activities, policies, and risk initiatives.
• Assess information risks in on-premises, IaaS, PaaS, SaaS, and generative AI projects, and ensure controls are considered early in project and software development lifecycles.
• Apply the organization’s information risk assessment methodology, policies, and standards.
• Develop risk management strategies, provide security consulting, and track issues and corrective action plans through resolution.
• Support operational security processes, including incident response, vulnerability management, and firewall reviews.
• Respond to audits and regulatory reviews, and advise stakeholders on security requirements and best practices.
• Support business continuity and disaster recovery activities to help recover critical processes.

Qualifications

• At least five years of experience in information risk management, vendor risk management, project risk management, IT audit, or IT controls assessment.
• Bachelor’s degree or equivalent.
• CISSP, CRISC, CISM, CISA, or another relevant designation is an asset.
• Knowledge of frameworks and requirements such as NIST, ISO 27001, GDPR, Sarbanes-Oxley, and the EU AI Act.

Compensation

Expected salary range: $113,000–$163,000 CAD per year. Eligible employees may also participate in incentive programs and receive customizable benefits.