Asia Information Security Lead – Risk & Compliance

Manulife; Quezon City; Hybrid; PHP 1,500,000 - 2,100,000; Full time

Job summary

Manulife is seeking an Information Technology Security Manager to lead and perform risk assessments across Asia markets, reporting through the Asia Regional Office Security Officer. You will partner with BUSO centers of excellence to strengthen control environments and manage information and operational risks.

The role requires designing risk assessment playbooks, facilitating security consultations, and coordinating with market BUSOs and control functions to centralize and automate risk

Qualifications

• University degree in IT, cybersecurity, information systems, risk management, or a related field.
• 3–5 years of progressive information security management, technology risk, or IT controls experience.
• Hands-on experience conducting and reviewing information security risk assessments for projects and BAU operations.
• Practical knowledge of security and operational risk processes including incident management, access reviews, DLP, vulnerability and patch management, continuity and disaster recovery.
• Strong understanding of information risk management principles, CIA triad, and zero-trust concepts.
• Experience developing standardized procedures, governance, reporting, quality assurance, and escalation processes across multiple stakeholders.
• Excellent written and verbal communication, able to explain risks to technical and non-technical audiences.
• Self-driven and organized, able to manage multiple priorities with minimal supervision.
• Commitment to continuous learning, knowledge sharing, adaptability, and process improvement.

Responsibilities

• Lead end-to-end information risk assessments across Asia markets, from scoping to risk acceptance.
• Review assessments to ensure consistent application of methodologies and quality.
• Analyze designs, data flows, tech components, and third-party arrangements for information security risks.
• Translate findings into clear risk statements and actionable mitigation.
• Monitor risk treatment plans and escalated risks through governance channels.
• Develop regional information risk assessment framework, playbooks, templates, and reporting.
• Promote information risk assessment program across Asia markets and guidance to BUSOs and teams.
• Provide security consultation to project teams and partners, including specialized assessments.
• Coordinate with BUSOs and control functions to centralize, standardize, automate, or transition activities to the CoE.
• Establish governance for CoE services, onboarding/offboarding, reporting, and service measures.
• Deliver centralized security and risk activities within service expectations and BAU processes.
• Support incident management, particularly data loss prevention, with regional teams.
• Provide regular status and risk updates to stakeholders, highlighting trends and actions.
• Conduct knowledge transfer and training for new team members and assessors.
• Contribute to continuous improvement of regional security and risk processes.

Skills

Information security

Risk assessment

Stakeholder management

Communication

Project management

Education

University degree in IT / cybersecurity / information systems

Tools

ServiceNow

Jira

Power BI

ProcessUnity

Confluence

Archer

Devo

BlueCat Address Manager

Job description

Manulife is seeking an Information Technology Security Manager to lead and perform risk assessments across Asia markets, reporting through the Asia Regional Office Security Officer. You will partner with BUSO centers of excellence to strengthen control environments and manage information and operational risks.

The role requires designing risk assessment playbooks, facilitating security consultations, and coordinating with market BUSOs and control functions to centralize and automate risk