Information Risk Manager

Manulife John Hancock; Quezon City; Hybrid; PHP 900,000 - 1,200,000; Full time

Benefits offered by this job

Flexible work arrangement

Global team environment

Job summary

Manulife John Hancock in the Philippines is seeking a Manager, Information Risk Management to provide independent second-line oversight across technology, data, and operational risk, ensuring risk practices align with standards and regulatory expectations.

You will review risk assessments, RCSA, third-party risk, incidents, business continuity, and disaster recovery, identify gaps, and partner with risk and tech stakeholders to drive robust risk governance.

Qualifications

• 6–10+ years of experience in Information Risk, Technology Risk, Cyber Risk, GRC, or related areas.
• Experience performing independent second-line oversight, challenge, or audit-style reviews.
• Strong understanding of technology, data, cloud, infrastructure, and operational resilience risks.
• Experience with risk programs such as RCSA, third-party risk, issue and incident management, business continuity/disaster recovery, and change risk.

Responsibilities

• Provide independent second-line challenge of risk assessments, controls, risk decisions, and corrective action plans.
• Review RCSA, third-party/vendor risk, incidents, technology changes, business continuity, and disaster recovery activities to identify gaps and areas of concern.
• Assess technology, data, cloud, infrastructure, and operational risks and provide clear, evidence-based risk opinions and recommendations.
• Identify underassessed risks, control weaknesses, systemic issues, and emerging risks, escalating material concerns when necessary.
• Partner with risk teams and senior technology and data stakeholders, representing the second line in risk discussions and governance forums.

Skills

Information risk

Technology risk

GRC

Audit-style review

Vendor risk

Regulatory frameworks

Stakeholder management

Tools

Archer

ServiceNow

Fusion

Job description

We're looking for a Manager, Information Risk Management to join our team at MGS. In this role, you are expected to provide independent second-line oversight and challenge across technology, data, and operational risk, ensuring risk practices and controls are aligned with established standards and regulatory expectations.

Position Responsibilities:

• Provide independent second-line challenge of risk assessments, controls, risk decisions, and corrective action plans.
• Review RCSA, third-party/vendor risk, incidents, technology changes, business continuity, and disaster recovery activities to identify gaps and areas of concern.
• Assess technology, data, cloud, infrastructure, and operational risks and provide clear, evidence-based risk opinions and recommendations.
• Identify underassessed risks, control weaknesses, systemic issues, and emerging risks, escalating material concerns when necessary.
• Partner with risk teams and senior technology and data stakeholders, representing the second line in risk discussions and governance forums.

Required Qualifications:

• 6-10+ years of experience in Information Risk, Technology Risk, Cyber Risk, GRC, Operational Risk, or other related areas.
• Experience performing independent second-line oversight, challenge, or audit-style review activities.
• Strong understanding of technology, data, cloud, infrastructure, and operational resilience risks.
• Experience with risk programs such as RCSA, third-party risk, issue and incident management, business continuity/disaster recovery, and change risk.

Preferred Qualifications:

• Familiarity with GRC platforms such as Archer, ServiceNow, or Fusion.
• Knowledge of risk and regulatory frameworks such as ISO, NIST, COBIT, CSA/CCM, and OSFI.
• Exposure to Generative AI, Agentic AI, automation, or continuous monitoring technologies.
• Strong analytical skills with the ability to evaluate complex risk scenarios and provide well-supported recommendations.
• Strong stakeholder management and communication skills, with the ability to confidently challenge and advise senior stakeholders.

When you join our team:

• We'll empower you to learn and grow the career you want.
• We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we'll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html .

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [e-mail] .

Working Arrangement

Hybrid