Vendor Risk Management Lead: IT Security & Controls

Manulife; Southwestern Ontario; Híbrido; CAD 85.000 - 135.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work arrangement (3 days in the

Descripción de la vacante

Manulife, based in Canada, seeks a Manager, Risk Management to lead risk assessments of vendor information systems and IT controls, including AI governance and DR/BC reviews. This individual contributor role is hybrid with 3 days in-office in Toronto/Waterloo, Ontario.

You will collaborate across teams, drive process improvements, and provide guidance on IT risks and supplier contract considerations, reporting to the Vendor Information Risk Management group.

Formación

• 5–7 years IT work experience, including 2–3 years IT auditing or equivalent.
• Bachelor's degree or equivalent.
• CISA certification is required.
• CRISC or CISSP preferred but not required.
• Excellent organization and planning abilities.
• Understanding of IT controls, audit and risk management.
• Ability to present to and work with all levels of management.
• Ability to handle complex issues.
• Adaptability to changes within the business.
• Ability to explain business context to IRM principles.

Responsabilidades

• Conduct IT information security risk assessments of vendors (IT controls, AI governance, BC/DR, subcontractor reviews).
• Assist with risk control assessments of vendor information systems and functions.
• Provide expert understanding of technical concepts and solutions.
• Research and investigate new issues to stay current.
• Identify problems and propose/execute solutions.
• Perform contract reviews with Legal as appropriate.
• Collaborate with vendors, partners and other teams.
• Assist with metrics creation and reporting.
• Improve processes to add value and efficiency.
• Conduct site visits of vendors virtually as needed.

Conocimientos

IT auditing

IT controls

Risk management

CISA

CISSP (preferred)

Organization & planning

Communication

Adaptability

IRMs & controls context

Big picture thinking

Stakeholder mgmt

Problem solving

Contracts & vendor reviews

Educación

Bachelor's degree or equivalent

Descripción del empleo

Manulife, based in Canada, seeks a Manager, Risk Management to lead risk assessments of vendor information systems and IT controls, including AI governance and DR/BC reviews. This individual contributor role is hybrid with 3 days in-office in Toronto/Waterloo, Ontario.

You will collaborate across teams, drive process improvements, and provide guidance on IT risks and supplier contract considerations, reporting to the Vendor Information Risk Management group.