Information Risk Management Analyst

Manulife Financial; Quezon City; On-site; PHP 600,000 - 900,000; Full time

Job summary

Manulife Financial in Quezon City is seeking a Senior Information Risk Management (IRM) Analyst to support GWAM Risk – Cybersecurity Operations. You will perform information risk assessments, execute established workflows, and help manage issue tracking, CAPs, and KRI reporting.

The role emphasizes data analysis, automation, and collaboration with stakeholders across the organization, with a hybrid work arrangement in Quezon City.

Qualifications

• Bachelor's degree in Computer Science, Information Technology or equivalent.
• Post-secondary education in information security, computer science, information technology, software engineering, or equivalent professional education.
• Strong knowledge of security controls, frameworks, regulatory requirements, standards, and concepts (ISO 27001/27002, MAS; OWASP, CSA).
• Experience in a corporate environment; attention to risk documentation and issue tracking.
• Strong interpersonal and collaboration skills with ability to engage diverse teams.

Responsibilities

• Execute documented processes to provide IRM services.
• Document and maintain process documents.
• Drive efficiencies via data analytics, automation and improvement ideas.
• Perform information risk assessments per methodology and standards.
• Manage Key Risk Indicators (KRI) and control monitoring.
• Respond to monthly reports and ad hoc requests per SLAs.
• Collaborate on tool development and process automation.
• Track information risk issues and CAPs to closure.
• Work independently and provide progress updates.
• Adapt to hybrid shifts in Quezon City office.

Skills

Security controls knowledge

Risk assessment

Analytical thinking

Team collaboration

Problem solving

Education

Bachelor's degree in Computer Science/IT

Post-secondary information security education

Tools

ISO 27001/27002

OWASP

CIS

MAS

Job description

The Senior Information Risk Management (IRM) Analyst will support GWAM Risk – Cybersecurity Operations by performing information risk assessments, executing established risk management workflows, and supporting key operational activities such as issue and corrective action plan management, Key Risk Indicator (KRI) reporting, and control monitoring. This role will also help drive process efficiency and continuous improvement through documentation, data analysis, automation, and collaboration with stakeholders across the organization.

Position Responsibilities

• Execute documented process workflows to perform General Information Risk Management (IRM) services.

• Document processes and workflows and maintain/update the existing process documents.

• Contribute to driving efficiencies and identifying enhancement opportunities across existing processes and techniques through data analytics, automation, and other process improvement ideas.

• Perform activities assigned to GWAM Risk – Cybersecurity Operations.

• Perform information risk assessments in compliance with the global Information Risk Assessment methodology, policies, and standards.

• Perform Key Risk Indicator (KRI) management activities.

• Perform control monitoring and conduct risk assessments, including but not limited to firewall, Zscaler exemptions, VDI, Azure portal access, software, removable media access, and network security group requests.

• Ensure monthly reports and ad hoc requests are responded to and delivered in accordance with SLAs.

• Drive projects for improving process efficiency and automation. Contribute to and collaborate on the development and improvement of tools.

• Research, collect, and analyze qualitative data required for risk assessments.

• Track and manage identified information risk issues and associated corrective action plans (CAPs), ensuring timely resolution and closure in alignment with governance requirements.

• Actively contributes to knowledge-sharing exercises.

• Work independently on assigned tasks while providing regular progress updates.

• Candidate must be flexible to work in the morning or rotating shifts in a hybrid environment, as required in our Quezon City Office.

Required Qualifications

• At least one year of experience in a corporate environment.

• Strong knowledge of security controls, frameworks, regulatory requirements, standards, and concepts (e.g., ISO 27001/27002, MAS), as well as industry best practices (e.g., OWASP, CSA, CIS).

• Bachelor's degree in Computer Science, Information Technology or equivalent.

• Post-secondary education in information security, computer science, information technology, software engineering, or equivalent professional education.

• Must meet current job expectations and performance metrics for internal applicants.

• Exceptional attention to detail, ensuring accuracy and completeness in risk documentation and issue tracking.

• Strong interpersonal and collaboration skills, with the ability to effectively engage with diverse teams and stakeholders.

• Strong problem-solving and analytical skills, with an innovative mindset.

• A team player who can also work independently.

When you join our team

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy‑related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [e-mail].

Working Arrangement

Hybrid