VP, Operational Risk Oversight

Manulife/John Hancock; Toronto; On-site; CAD 180,000 - 240,000; Full time

Job summary

Manulife John Hancock is seeking an experienced information risk and ORM leader to guide resilience and crisis risk across the enterprise. You will manage a global team, shape risk commitments, and align initiatives with regulatory expectations.

In this role, you will drive transformation toward an integrated ORM model, oversee budgets, set training paths, and collaborate with regulators and executives to sustain robust risk management.

Qualifications

• A minimum of 12-15 years with focus on Business Resiliency, Crisis management and ORM principles, processes and deliverables within a large enterprise.

Responsibilities

• Deliver information risk expertise to business users for Resilience & Crisis risk management.
• Lead the Resilience & Crisis risk team across locations with staffing decisions.
• Set risk commitments; balance BAU with priorities and long-term strategy for information risk.
• Foster a talent pipeline; plan training and certifications; anticipate skills and tool needs.
• Oversee team budget and spending.
• Ensure compliance with regulations and keep staff trained on information risk developments.
• Coordinate with global information risk teams to maintain uniform processes.
• Maintain relationships with executives and internal customers across business lines.
• Lead the Global ORM function and support the Head of Technology, Operational and AI Risk.
• Oversee enterprise ORM program aligned with regulatory expectations and industry practices.
• Drive ORM transformation toward an integrated model for operations.
• Lead strategic and global initiatives to support business goals.
• Lead talent transformation to attract and retain skilled individuals.
• Design and implement core ORM program elements: framework, policies, and standards.
• Define Risk Appetite for Operational Risk; RAC and incident data processes.
• Develop ORM testing and risk indicator tracking; quarterly dashboards.
• Evaluate operational risk on major projects, products, and M&A.
• Develop ORM technology implementations (e.g., Archer).
• Communicate ORM requirements to executives; support regulator interactions.
• Collaborate with global functions to integrate ORM programs.
• Keep abreast of industry developments and regulator expectations.

Job description

Position Responsibilities:

Delivering information risk expertise and advice to the business users enabling them to manage their Resilience & Crisis response risks efficiently and effectively.

Managing the Resilience & Crisis risk team and function with direct reports in multiple locations with responsibility for all staffing decisions related to this team.

Adjusting and setting risk commitments within the team. In a changing environment, constantly reviewing and balancing the team's business-as-usual commitments with short-term/immediate priorities and long-term strategic initiatives. Completing short-term planning and creating long-term strategy that will mature information risk capabilities ensuring the practices keep pace with both internal drivers (company strategy and goals) and external drivers (technology, regulations, threats, vulnerabilities, etc.).

Fostering and maintaining a talent pipeline to ensure staff openings and hiring are managed proactively; devising training paths and development plans to ensure skills within the team are fostered and strengthened to meet both the current and anticipated demand; maintaining and if appropriate attaining new certifications. Anticipating the needs of skills, knowledge, and tools for their team.

Being responsible and accountable for team budget and spending.

Staying abreast of new regulations, laws, and requirements for relevant risks across jurisdictions and overseeing compliance with same as required. Ensuring staff are properly trained and keep current with information risk and resilience developments, and technology (both in use at Manulife and across the industry).

Interacting with and cooperating with information risk teams globally ensuring uniform processes and compliance with Global Information Risk Management processes, procedures, policies, standards, templates, and guidelines.

Maintaining and fostering enduring relationships with internal customers namely: Executives and other staff within business lines project managers, developers, and others.

Executives and peers within the wider Information Risk Management community executives and others within other second- and third-line of defense teams (Audit Services, Operational Risk, Compliance, Investigative Services, Enterprise Risk, etc.).

Leading the Global ORM function and supporting the Head of Technology, Operational and AI Risk in overseeing operational risk across the Company

Leading the implementation of the Company's enterprise-level ORM program and ensuring the program adds value to the organization and is aligned with regulatory expectations and industry practices.

Responsible for driving operational risk transformation towards an effective and efficient integrated model with overall operations. Reimagine and lead with a strategic lens.

Drive and implement strategic and global operational initiatives to support business goals

Lead talent transformation to attract and retain highly skilled individuals

Ensuring core program elements are appropriately designed and implemented including the following:

Company's ORM Framework document and Operational Risk Policy and Standards.

Risk Appetite for Operational Risk.

Risk and Control Assessment program.

Operational incident data collection database and related processes.

ORM scenario and stress testing program

Evaluating operational risk on significant projects/programs, new/revised products, and M&A transactions.

Key risk indicator tracking;

Operational risk reporting including quarterly dashboard.

Leading the development and implementation of ORM supporting technology (i.e. Archer

Responsible for communication and reporting requirements related to the ORM Program including the following: Supporting the Operational Risk Committee to facilitate its effective operation and oversight of enterprise level operational risk.

Acting as the key point of contact for discussions with Manulife's primary regulator (OSFI)and other regulators as appropriate.

Act as an ambassador for the ORM program across the Company. Ensuring appropriate communication of the program's benefit and requirements to generate the required organizational support

Collaborating with other global functional groups to ensure other specific operational risk programs are integrated into the ORM program

Keeping abreast of industry developments, best practices and trends in ORM. This includes monitoring international developments as they pertain to operational risk and future requirements that may be established by OSFI, or other regulators

Need to collaborate extensively with other Global functions and segments to enhance and implement the ORM program

Effectively communicate requirements and value proposition to build and maintain support.

Required Qualifications:

A minimum of 12-15 years with focus on Business Resiliency, Crisis management and ORM principles, processes and deliverables within a large enterprise.

Possess extensive operations and business experience in a dynamic, comple