Hybrid Cybersecurity Risk Lead – Asia CoE

Manulife Global Solutions (MGS); Quezon City; Hybrid; PHP 1,800,000 - 3,000,000; Full time

Job summary

Manulife Financial Corporation (MFC) is seeking a Cybersecurity Manager within the BUSO CoE to lead risk assessments, governance, and security program execution across Asia markets. You will collaborate with BUSOs, assessors, and technology teams to strengthen risk ownership and ensure effective control execution.

The role requires deep expertise in information risk management, security operations, and regulatory alignment, with a focus on cross‑market delivery and continuous improvement.

Qualifications

• University/College graduate with 3–5 years of progressive Cybersecurity experience, including 3+ years as an Information Security Officer.
• Solid background in Cybersecurity Management, Information Security Risk Assessment (project and BAU), Security Incident Response and Coordination, Access Review, Data Loss Prevention Management, and related security processes.
• Profound knowledge of Manulife’s Information Risk Management Framework, CIA Triad, and Zero-Trust Tolerance.
• Strong familiarity with tools and workflows such as JIRA, ServiceNow, Devo, PowerBI, Confluence, Archer.
• Certifications such as CISSP or CISM preferred; GCIH or incident response certifications advantageous.
• Experience in financial services/insurance environments and regulatory expectations.

Responsibilities

• Lead end-to-end Project Information Risk Assessments across Asia markets, from scoping to risk acceptance.
• Review assessments to ensure consistent application of risk methodologies and documentation standards.
• Analyze designs, data flows, and third‑party arrangements to identify information security risks.
• Translate findings into risk statements and practical recommendations for stakeholders.
• Monitor risk‑treatment plans and escalate material risks through governance channels.
• Develop and maintain regional information risk assessment framework and playbooks.
• Promote the information risk assessment program across Asia markets and guide BUSOs and assessors.
• Provide information security consultation to project teams and partners, including specialized assessments when needed.
• Partner with BUSOs and control functions to centralize, standardize, or automate risk activities.
• Establish governance for CoE services and ensure delivery within service expectations.
• Deliver centralized security activities, including analysis of high‑risk service requests and BAU processes.
• Support incident resolution for security events, especially Data Loss Prevention incidents.
• Provide status updates to BUSOs and regional stakeholders, highlighting trends and risks.
• Conduct knowledge transfer and coaching for new team members.

Skills

Cybersecurity management

Information security risk assessment

Security incident response

Access review

Data loss prevention

Vulnerability & patch management

Business continuity & DR

Zero-trust concepts

Education

University/College graduate

Tools

JIRA

ServiceNow

Devo

PowerBI

Confluence

Archer

Job description

Manulife Financial Corporation (MFC) is seeking a Cybersecurity Manager within the BUSO CoE to lead risk assessments, governance, and security program execution across Asia markets. You will collaborate with BUSOs, assessors, and technology teams to strengthen risk ownership and ensure effective control execution.

The role requires deep expertise in information risk management, security operations, and regulatory alignment, with a focus on cross‑market delivery and continuous improvement.