Vendor Risk Management Lead — IT Controls & Security

Manulife Insurance Malaysia; Southwestern Ontario; On-site; CAD 85,000 - 135,000; Full time

Job summary

Manulife Financial Corporation is seeking a Manager, Risk Management to join the Vendor Information Risk Management team. Based in Toronto or Waterloo with a hybrid work arrangement (3 days in office), you will assess information security controls, measure effectiveness, and advise on IT risks and contract gaps with suppliers.

The ideal candidate has 5–7 years in IT with 2–3 years IT auditing, a Bachelor's degree, and a CISA certification.

Qualifications

• 5 to 7 years of IT work experience, including 2 to 3 years IT auditing or equivalent experience.
• CISA is required
• CRISC or CISSP preferred but not required.

Responsibilities

• Conduct assessments on information security controls for vendors.
• Measure control effectiveness and identify gaps.
• Provide guidance on IT risks and contract gaps with suppliers.
• Perform risk control assessments of vendor information systems and functions.
• Collaborate with Legal, vendors, and other teams; assist with metrics and reporting.

Skills

IT risk assessment

IT auditing

Information security

Executive communication

Education

Bachelor's degree or equivalent

Job description

Manulife Financial Corporation is seeking a Manager, Risk Management to join the Vendor Information Risk Management team. Based in Toronto or Waterloo with a hybrid work arrangement (3 days in office), you will assess information security controls, measure effectiveness, and advise on IT risks and contract gaps with suppliers.

The ideal candidate has 5–7 years in IT with 2–3 years IT auditing, a Bachelor's degree, and a CISA certification.