Senior Manager, Data Risk Oversight

Manulife; Montreal (administrative region); Hybrid; CAD 113,000 - 163,000; Full time

Job summary

Manulife is seeking a Senior Manager, Data Risk Oversight, to build enterprise data risk oversight frameworks, standards, and tools, and to provide independent challenge of systemic data risks across the organization.

This role interfaces with AI, data governance, privacy, and compliance teams, ensuring risk activities align with OSFI guidance and regulatory regimes. Hybrid work model and Quebec client support are part of the role.

Qualifications

• 10+ years of experience in data risk, data governance, privacy, or a related discipline.
• Bachelor's degree in CS/Data Science/Information Management/Statistics/Mathematics/Engineering.
• Proven experience designing data risk frameworks, standards, methodologies, or oversight tools.
• Strong understanding of data governance areas: quality, lineage, retention, privacy, access management.
• Experience with OSFI guidance (E-21, E-23, B-10, B-13) and privacy laws (PIPEDA).
• Experience overseeing data used in AI/ML and synthetic data; links to model risk.

Responsibilities

• Design and maintain the enterprise data risk oversight framework, standards, methodologies, and tools.
• Develop oversight tools and assessment approaches for data risk decisions by first-line functions.
• Aggregate and analyze data risk across segments to identify systemic exposures and gaps.
• Provide independent challenge of the AI and data risk program’s effectiveness and maturity.
• Set enterprise standards for data lifecycle governance, privacy, and access control.
• Coordinate with Privacy, Legal, and Compliance on data privacy and consent rules.
• Escalate systemic weaknesses to senior management and governance committees.

Skills

Data risk frameworks

Risk governance

Second-line risk

OSFI guidance

Data privacy

Communication

Bilingual EN/FR

Education

Bachelor's degree in Computer Science, Data Science, Information Management, Statistics, Mathematics, Engineering

Job description

The AI & Emerging Technology Risk Oversight team, part of Global Risk Management, is an independent second-line function. We provide oversight and challenge of how Manulife manages its AI, technology, cyber, data, and emerging technology risks as the company expands its use of data and new technologies.

Manulife is seeking an experienced Senior Manager, Data Risk Oversight, to build the frameworks, standards, methodologies, and tools that enable effective data risk management and oversight across the enterprise, and to provide independent challenge of the systemic and strategic data risks that shape the company's overall risk posture.

This role is distinct from the segment-level oversight performed by Information Risk Officers, who use these frameworks and tools to challenge individual business decisions and initiatives. It does not own or operate data controls, perform first-line data activities, approve initiatives, accept or own data risk, or manage remediation. These responsibilities remain with the first line and the relevant governance forums.

Position Responsibilities:

• Design, maintain, and continuously improve the enterprise data risk oversight framework, standards, methodologies, and tools that enable data risk to be managed and challenged consistently across the organization.

• Build the practical oversight tools, guidance, templates, and assessment approaches that segment Information Risk Officers use to perform their challenge of first-line data risk decisions.

• Aggregate and analyze data risk across segments and functions to identify concentrations, themes, systemic exposures, and gaps in the enterprise risk posture.

• Provide independent challenge of the overall effectiveness, consistency, and maturity of Manulife's AI and data risk program.

• Set enterprise standards and oversight expectations across the data lifecycle, including data governance, quality and fitness for use, lineage and provenance, retention, minimization, and disposal.

• Define enterprise standards and oversight approaches for data privacy, consent, sensitive-data classification, and access control, in coordination with Privacy, Legal, and Compliance.

• Establish risk expectations and oversight approaches for third-party, shared, and AI-generated (synthetic) data, including the right to use it, its quality, its security, and whether its source is known and appropriate.

• Challenge data bias, representativeness, and ethical data use at a program level, particularly for data that feeds AI, and escalation systemic concerns about potential harm, unfairness, or misuse.

• Oversee enterprise data risk issues, ensuring significant and systemic weaknesses are identified, aggregated, and escalated to senior management and governance committees for timely resolution.

• Define enterprise data risk metrics and key risk indicators, and produce independent reporting, thematic reviews, and cross-segment dashboards for management and committees, feeding into Board-level reporting.

• Ensure the framework and oversight activities remain aligned with relevant OSFI guidance (including E-21 operational and data risk and E-23 model risk), enterprise data risk standards, and applicable privacy regimes.

• Provide independent, strategic challenge on enterprise initiatives, AI use cases, and emerging technologies involving data, coordinating with the AI Model Risk, AI Technology & Cyber, and Emerging Technology teams so oversight is coordinated and non-duplicative.

Required Qualifications:

• 10+ years of relevant experience in data risk, data governance, privacy, enterprise risk management, technology risk, internal audit, or a related discipline.

• Bachelor's degree in Computer Science, Data Science, Information Management, Statistics, Mathematics, Engineering, Risk Management, Law, or a related field.

• Proven experience designing data risk frameworks, standards, methodologies, or oversight tools, ideally in a second-line or independent assurance role in financial services, insurance, or another regulated industry.

• Strong understanding of the core areas of data governance, including data quality, lineage, classification, retention, privacy, consent, and access management.

• Experience aggregating and analyzing risk across a large, complex organization to identify systemic themes, and familiarity with relevant OSFI guidance (including E-21 operational and data risk, E-23 model risk, B-10 third-party, and B-13 technology and cyber) and privacy laws such as PIPEDA and other global privacy rules.

• Experience overseeing or challenging data used in AI, machine learning, or advanced analytics, including AI training data and synthetic data, and a good understanding of how data risk connects to model risk.

• Experience preparing risk assessments, management reporting, executive presentations, and materials for governance committees.

• A proven ability to challenge others constructively and influence senior leaders without direct authority.

• Excellent written and verbal communication skills, including the ability to explain complex data and risk topics clearly to senior leaders and committees.

• Strong judgment, independence, and the confidence to raise tough issues, along with the ability to juggle priorities and work quickly while keeping quality high and documentation clear.

• Bilingualism (English and French) is a strong asset. If the successful candidate is in Québec, proficiency in both languages will be required to support clients from various provinces outside of Quebec.

Preferred Qualifications:

• Knowledge of industry data management frameworks such as DAMA-DMBOK or DCAM, and relevant certifications (for example, CIPP/C, CIPM, CDMP, CISA, CRISC, or FRM), is considered an asset.

When you join our team:

• We’ll empower you to learn and grow the career you want.

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

• As part of our global team, we’ll support you in shaping the future you want to see.

#LI - Hybrid

The role being advertised is an existing vacancy.

Acerca de Manulife y John Hancock

Manulife Financial Corporation es un importante proveedor internacional de servicios financieros que ayuda a las personas a tomar decisiones de una manera más fácil y a vivir mejor. Para obtener más información acerca de nosotros, visite http://www.manulife.com .

Manulife es un empleador que ofrece igualdad de oportunidades

En Manulife/John Hancock, valoramos nuestra diversidad. Nos esforzamos por atraer, formar y retener una fuerza laboral tan diversa como los clientes a los que prestamos servicios, y para fomentar un entorno laboral inclusivo en el que se aprovechen las fortalezas de las culturas y las personas. Estamos comprometidos con la equidad en las contrataciones, la retención de talento, el ascenso y la remuneración, y administramos todas nuestras prácticas y programas sin discriminación por motivos de raza, ascendencia, lugar de origen, color, origen étnico, ciudadanía, religión o creencias religiosas, credo, sexo (incluyendo el embarazo y las afecciones relacionadas con este), orientación sexual, características genéticas, condición de veterano, identidad de género, expresión de género, edad, estado civil, estatus familiar, discapacidad, o cualquier otro aspecto protegido por la ley vigente.

Nuestra prioridad es eliminar las barreras para garantizar la igualdad de acceso al empleo. Un representante de Recursos Humanos trabajará con los solicitantes que requieran una adaptación razonable durante el proceso de solicitud. Toda la información que se haya compartido durante el proceso de solicitud de adaptación se almacenará y utilizará de manera congruente con las leyes y las políticas de Manulife/John Hancock correspondientes. Para solicitar una adaptación razonable en el proceso de solicitud, envíenos un mensaje a [e-mail] .

Referenced Salary Location

Toronto, Ontario

Modalidades de Trabajo

Híbrido

Salary range is expected to be between

$113,000.00 CAD - $163,000.00 CAD

Los empleados también tienen la oportunidad de participar en programas de incentivos y recibir una compensación vinculada al rendimiento empresarial e individual. El salario real variará según las condiciones del mercado local, la geografía y factores relacionados con el puesto como conocimientos, habilidades, requerimientos, experiencia y educación/formación. Si solicitas este puesto fuera de tu ubicación principal, por favor escríbenos a [e-mail] para conocer el rango salarial correspondiente a tu ubicación.

Manulife ofrece a los empleados aptos una amplia variedad de beneficios personalizables, entre ellos, beneficios de salud, odontológicos, de salud mental, oftalmológicos, por discapacidad a corto y a largo plazo, cobertura de seguro de vida y por muerte accidental y desmembramiento, adopción/subrogación y bienestar, y planes de asistencia al empleado/familiar. También ofrecemos a los empleados admisibles varios planes de ahorro para la jubilación (incluidos planes de pensiones y un plan mundial de propiedad de acciones con contribuciones equivalentes del empleador) y recursos de asesoramiento y educación financiera. Nuestro generoso programa de tiempo libre remunerado en Canadá incluye feriados, vacaciones, días personales y días por enfermedad, y ofrecemos la gama completa de ausencia laboral reglamentaria. Si se está postulando para este puesto en los EE. UU., póngase en contacto con [e-mail] para obtener más información sobre las disposiciones relativas al tiempo libre remunerado específicas de EE. UU.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement (https://careers.manulife.com/global/en/talentacquisitionprivacystatement) .