Manager/ Senior Manager, Information Risk Management

Manulife; Hong Kong; Hybrid; HKD 480,000 - 720,000; Full time

Job summary

Manulife Financial Corporation is seeking an Information Risk Manager in Hong Kong to promote and enhance awareness of information risk controls and disaster recovery across markets. The role emphasizes second-line IRM oversight, stakeholder engagement, and reporting using internal risk tools.

The candidate will review issues against IRM standards, provide market insights, and collaborate with IT, Risk and Compliance teams while leveraging PowerBI for analytics.

Qualifications

• Holds a bachelor’s degree in IT or related fields.
• Minimum 1–3 years of relevant experience in information risk management or information security management.
• Sound technology background with risk management sense.
• Broad knowledge of financial services/insurance business and related products.
• Strong written and oral communication and presentation skills.
• Detail-oriented with good analytical, critical thinking and problem-solving skills with the ability to think strategically.
• Solid influencing skills with the ability to build effective relationships within and across divisions.
• Professional designation (e.g., CISSP, CRISC, CISA, CSSLP, or CISM) would be an advantage.
• High proficiency in data analytics tools such as PowerBI is a PLUS.

Responsibilities

• IRM Oversight & Risk Review: Provide second-line IRM oversight of first-line activities related to change management, third-party risk, incident response, business continuity, and disaster recovery.
• Review and challenge issues, risk and exceptions in accordance with IRM standards.
• Market Advisory & Risk Insights: Deliver market-specific risk insights and advisory support to stakeholders.
• Guide market teams on global IRM initiatives and ensure local alignment.
• Monitor the risk remediation plans within the market and evaluate market risk posture through reporting.
• Governance & Stakeholder Engagement: Prepare for and follow up on market Information Risk Council meetings with timely inputs.
• Build and maintain strong relationships with Market IT, Risk, Compliance, and other key stakeholders.
• Tools & Administration: Utilize internal risk tools effectively to support oversight and reporting; perform ad hoc tasks.

Skills

Communication & Presentation

Influencing skills

Analytical thinking

Critical thinking

Written & verbal communication

Risk management knowledge

Education

Bachelor's degree in Information Technology or related fields

Tools

PowerBI

Job description

The position requires good understanding of technology and information security risks and controls, disaster recovery, and solid communication, presentation and influencing skills. This position will operate across multiple markets and their businesses, functions, and geographies, to promote and enhance awareness of risks and controls.

Key Responsibilities

• IRM Oversight & Risk Review
• Provide second-line Information Risk Management (IRM) oversight of first-line defense activities related to change management, third-party risk, incident response, business continuity, and disaster recovery, ensuring alignment with the internal IRM framework.
• Review and challenge issues, risk and exceptions in accordance with IRM standards.
• Market Advisory & Risk Insights
• Deliver market-specific risk insights and advisory support to stakeholders.
• Guide market teams on global IRM initiatives and ensure local alignment.
• Monitor the risk remediation plans within the market.
• Facilitate evaluation of market risk posture through structured reporting.
• Governance & Stakeholder Engagement
• Prepare for and follow up on market Information Risk Council meetings, ensuring timely and accurate inputs.
• Build and maintain strong relationships with Market IT, Risk, Compliance, and other key stakeholders.
• Tools & Administration
• Utilize internal risk tools effectively to support oversight and reporting activities.
• Perform ad hoc tasks and administrative duties as required.

Knowledge/Skills/Competencies/Education

• Holds a bachelor’s degree in Information Technology (IT) or related fields
• Minimum 1 - 3 years of relevant experience in information risk management or information security management.
• Sound technology background with risk management sense.
• Broad knowledge of financial services/insurance business and related products.
• Solid written and oral communication and presentation skills.
• Detail-oriented with good analytical, critical thinking and problem-solving skills with the ability to think strategically.
• Solid influencing skills with the ability to build effective relationships, both within and across divisions.
• Professional designation, e.g. CISSP, CRISC, CISA, CSSLP, or CISM would be an advantage.
• High proficiency in data analytics tools such as PowerBI is a PLUS.

About Manulife And John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [e-mail].

Working Arrangement

Hybrid