Manager / Senior Manager, Information Risk Management

Manulife John Hancock; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Manulife John Hancock in Hong Kong seeks an Information Risk Management professional to support strategy execution across markets and promote risk awareness and controls.

You will coordinate governance forums, prepare decision papers, and deliver risk analytics for senior management, leveraging Power BI dashboards for transparency and insight.

The role requires robust communication, collaboration across divisions, and the ability to influence stakeholders in line with the IRM framework.

Qualifications

• Bachelor level degree in information technology, information security, risk management or related discipline.
• Minimum 3–5 years of experience in information risk management or information security management.
• Solid written and oral communication and presentation skills.
• Broad knowledge of financial services/insurance business and related products.
• Detail-oriented with strong analytical, critical thinking and problem-solving abilities; strategic mindset.
• Strong influencing skills with ability to build relationships across divisions.

Responsibilities

• Drive strategy execution, planning and roadmap activities under leadership supervision.
• Coordinate governance forums and prepare papers, briefs and logs for decisions.
• Produce risk analytics and concise reporting for senior management and committees.
• Provide second-line IRM oversight of change management, third-party risk, incident response and disaster recovery.

Skills

Communication skills

Presentation skills

Influencing skills

Analytical thinking

Strategic thinking

Detail oriented

Education

Bachelor's degree in Information Technology/Information Security/Risk Management

Tools

Power BI

Job description

The position requires good understanding of technology and information security risks and controls, disaster recovery, and solid communication, presentation and influencing skills. This position will operate across multiple markets and their businesses, functions, and geographies, to promote and enhance awareness of risks and controls.

Position Responsibilities:

1. Strategy execution and planning support

   Execute agreed AIRM strategic priorities, annual plans and roadmap activities under the direction of the Director and AIRM leadership, ensuring deliverables remain aligned with agreed objectives and timelines.

   Provide planning and administrative support for strategy and business reviews, including scheduling, information gathering, document preparation, consolidation of inputs and action tracking.

   Plan and coordinate AIRM engagement activities, including offsite activities, team meetings, leadership sessions, workshops, knowledge-sharing sessions and recognition activities.

   Coordinate onboarding and team integration activities that help colleagues understand AIRM priorities, ways of working and key stakeholders.

   Promote collaboration and connectivity across AIRM teams, locations and risk domains .

2. Governance and committee management coordination

   Coordinate AIRM governance forums, including the Asia Information Risk Committee (AIRC), through forward agenda planning, preparation and quality review of materials, meeting support, and tracking of decisions and actions.

   Prepare clear decision papers, briefing notes and governance materials that set out the issue, risk implications, options, dependencies and recommended action.

   Maintain governance artefacts, mandates, calendars, decision logs and action trackers, and follow up with accountable owners to support timely closure.

3. Executive reporting, risk analytics and management information

   Coordinate quarterly and ad hoc Asia information risk reporting, working with risk owners and subject matter experts to obtain complete, accurate and timely inputs.

   Produce concise, decision-oriented reporting for senior management and committees, covering risk exposure, control effectiveness, incidents, issues, remediation, delivery status and emerging themes.

   Apply consistent data definitions, ownership, quality checks and reporting standards, and challenge material gaps or inconsistencies before submission.

   Provide trend analysis, forward-looking insights and practical recommendations rather than status reporting alone.

   Support the development and improvement of dashboards, including opportunities to use Power BI and workflow automation to reduce manual effort and improve transparency.

4. Second-line risk oversight and advisory

   Provide second-line Information Risk Management (IRM) oversight of first-line defense activities related to change management, third-party risk, incident response, business continuity, and disaster recovery, ensuring alignment with the internal IRM framework.

   Monitor material risk themes, issues, exceptions and remediation progress, and escalation concerns through the appropriate governance route, in accordance with IRM standards.

   Deliver market-specific risk insights and advisory support to stakeholders, and guide market teams on global IRM initiatives and ensure local alignment.

Required Qualifications:

• Holds a Bachelor's degree or equivalent qualification in Information Technology, Information Security, Risk Management, or a related discipline.
• Minimum 3 - 5 years of relevant experience in information risk management or information security management.
• Sound technology background with risk management sense.
• Broad knowledge of financial services/insurance business and related products.
• Solid written and oral communication and presentation skills.
• Detail-oriented with good analytical, critical thinking and problem-solving skills with the ability to think strategically.
• Solid influencing skills with the ability to build effective relationships, both within and across divisions.

Preferred Qualifications:

• Professional designation, e.g. CISSP, CRISC, CISA, CSSLP, or CISM would be an advantage.
• High proficiency in data analytics tools such as PowerBI is a PLUS.

When you join our team:

We'll empower you to learn and grow the career you want. We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words. As part of our global team, we'll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html .

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the stre