Manager, technology governance & controls

Société Financière Manuvie; Toronto; Hybrid; CAD 94,000 - 175,000; Full time

Job summary

An established industry player is seeking a skilled Manager for their Enterprise Technology Services Team. This role involves monitoring and maintaining effective internal controls while conducting cybersecurity risk assessments and audits. You will collaborate with diverse teams to enhance security solutions, manage technology risks, and ensure compliance with regulatory standards. The company offers a dynamic environment that encourages professional growth and a strong work-life balance, making it an exciting opportunity for those passionate about technology and security.

Benefits

Medical Insurance

Dental Insurance

Mental Health Support

Flexible Work Policies

Professional Development Opportunities

Retirement Savings Plans

Paid Time Off

Employee Assistance Programs

Qualifications

• 5+ years in IT and Infrastructure/Architecture with Cyber Security focus.
• Knowledge of Technology and Cyber Security Risk Management.

Responsibilities

• Conduct information security and compliance assessments.
• Govern and mature the technology risk management program.

Skills

Communication Skills

Leadership Skills

Negotiation Skills

Adaptability

Industry Awareness

Education

Post Secondary Education (Computer Science/IT, Risk Management)

ISACA Courses (CISSP, CISA)

Job description

Join our Enterprise Technology Services Team!

Collaborating with the Director, Technology Governance & Control, our Manager will monitor and maintain an effective internal control environment across the business units in accordance with organization policies and in compliance with regulatory and industry requirements. Conduct and support infrastructure and cybersecurity risk assessments, audits, SOX and IT control testing and initiative assessments to ensure risks are identified, assessed and managed effectively; manage and coordinate audits, exams and associated responses.

Responsibilities:

• Assist with conducting various information security and compliance assessments

• Recommend additional security solutions, controls, or enhancements to existing security solutions to improve overall enterprise security

• Conduct RCSAs, initiative risk assessments (information security risks), facilitate and lead audits and control testing reviews as well as third party/vendor management security control reviews

• Govern, operate and mature the organizational technology risk management program.

• Support SOX IT control testing and reporting

• Monitor and remediate technology risks at the business unit level.

• Capture and report organizational technology risk program status and metrics.

• Identify, design, support and implement ETS shared services.

• Improve and provide oversight of organizational resilience capabilities.

• Review and keep up to date with Information Risk Standards and Technology Risk Policies.

• Manage business unit specified DR posture in line with business strategies and risk tolerance.

• Ensure infrastructure capabilities are in place and aligned with business unit needs.

• Triage and manage organizational Crisis and Incident Response.

• Local BCM point of contact for the organization and for Global Information Risk Management (GIRM).

• Collaborate and participate with GIRM to complete enhance program according to GIRM and OSFI expectations.

Skills and Experience:

• Superb communication and leadership skills with ability to collaborate with regionally diverse teams.

• Flexible and adaptable to change.

• Superior influencing and negotiation skills and the ability to build consensus.

• Provide thought leadership in support of technology risk and control practices and objectives.

• Service oriented, collaborative, and trusted culture

• Accountable and transparent for performance and sharing results

• Persistent in driving efficiencies and strategies.

• Industry awareness and standard processes.

Qualifications:

• Minimum of five (5) years’ of progressive Information Technology and Infrastructure/Architecture experience with a minimum of one year passionate about Cyber Security. Experience in planning, configuring, deploying, and main security solutions (including cloud) in an enterprise environment.

• Knowledge of Technology and Cyber Security Risk Management.

• Post secondary education preferred (Computer Science/IT, Risk Management)

• ISACA courses such as CISSP, CISA.

• Working knowledge of industry security standards such as ISO27001/ISO27002, NIST, etc.

When you join our team:

• We’ll empower you to learn and grow the career you want.

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

• As part of our distributed team, we’ll support you in shaping the future you want to see.

What can we offer?

• A competitive salary and benefits packages.

• A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.

• A focus on growing your career path with us.

• Flexible work policies and strong work-life balance.

• Professional development and leadership opportunities.

Our commitment:

Values-first culture

We lead with our Values every day and bring them to life together.

Boundless opportunity

We create opportunities to learn and grow at every stage of your career.

Continuous innovation

We invite you to help redefine the future of financial services.

Delivering the promise of Diversity, Equity, and Inclusion

We foster an inclusive workplace where everyone thrives.

Championing Corporate Citizenship

We build a business that benefits all collaborators and has a positive social and environmental impact.

À propos de Manuvie et de John Hancock

La Société Financière Manuvie est un chef de file mondial des services financiers qui aide les gens à prendre leurs décisions plus facilement et à vivre mieux. Pour en apprendre plus à notre sujet, rendez vous à l’adresse www.manuvie.com.

Manuvie est un employeur qui souscrit au principe de l’égalité d’accès à l’emploi

Chez Manulife/John Hancock nous valorisons notre diversité. Nous nous efforçons d’attirer, de perfectionner et de maintenir une main d'oeuvre qui est aussi diversifiée que nos clients, et de favoriser la création d’un milieu de travail inclusif qui met à profit la diversité de nos employés et les compétences de chacun. Nous nous engageons à assurer un recrutement, une fidélisation, une promotion et une rémunération équitables, et nous administrons toutes nos pratiques et tous nos programmes sans discrimination en raison de la race, de l’ascendance, du lieu d’origine, de la couleur, de l’origine ethnique, de la citoyenneté, de la religion ou des croyances ou des convictions religieuses, du genre (y compris grossesse et affection liée à une grossesse), de l’orientation sexuelle, des caractéristiques génétiques, du statut d’ancien combattant, de l’identité de genre, de l’expression de genre, de l’âge, de l’état matrimonial, de la situation de famille, d’une invalidité ou de tout autre motif protégé par la loi applicable.

Nous nous sommes donné comme priorité d’éliminer les obstacles à l’accès égalitaire à l’emploi. C’est pourquoi un représentant des Ressources humaines collaborera avec les candidats qui demandent accommodement raisonnable pendant le recrutement. Tous les renseignements communiqués pendant le processus de demande d'accommodement seront stockés et utilisés conformément aux lois et aux politiques applicables de Manuvie. Pour demander une mesure d’accommodement raisonnable dans le cadre du recrutement, écrivez à [e-mail].

Région principale

Toronto, Ontario

Modalités de travail

Hybride

L’échelle salariale devrait se situer entre

$94,220.00 CAD - $174,980.00 CAD

Si vous posez votre candidature à ce poste en dehors de la région principale, veuillez écrire à [e-mail] pour obtenir l’échelle salariale correspondant à votre région. Le salaire varie en fonction des conditions du marché local, de la géographie et de facteurs pertinents liés au poste telles les connaissances, les compétences, les qualifications, l’expérience et l’éducation ou la formation. Les employés ont également la possibilité de participer à des programmes de motivation et de toucher une rémunération incitative liée au rendement de l’entreprise et au rendement individuel.

Manuvie offre aux employés admissibles une vaste gamme d’avantages sociaux personnalisables, notamment une assurance soins médicaux, soins dentaires, santé mentale, soins de la vue, invalidité de courte et de longue durée, assurance vie et assurance DMA, assurance adoption, de maternité de substitution et de soins médicaux non urgents ainsi que des programmes d’aide aux employés et leur famille. Nous proposons également aux employés admissibles différents régimes d’épargne-retraite (y compris des régimes de rente et un programme international d’actionnariat assortie de cotisations patronales de contrepartie) ainsi que des ressources en matière d’éducation et de conseils financiers. Notre généreux programme de congés rémunérés au Canada comprend les jours fériés, les congés annuels, les congés personnels et les congés de maladie, et nous offrons toute la gamme des congés autorisés prévus par la loi. Si vous posez votre candidature à ce poste aux États-Unis, veuillez écrire à [e-mail] pour obtenir de plus amples renseignements sur les dispositions relatives aux congés rémunérés spécifiques aux États-Unis.