Information Risk Manager, 2nd Line of Defense

Manulife/John Hancock; Manila; Hybrid; PHP 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Hybrid work arrangement

Flexible work options

Job summary

Manulife/John Hancock is seeking an Information Risk Manager to support the North America risk oversight program in the 2nd line of defense. The role focuses on information security, technology risk, business continuity, and disaster recovery across U.S.

and Canada, and requires coordinating with first-line teams to identify and mitigate risks. The successful candidate will lead independent reviews, challenge control effectiveness, and advise senior leaders on risk governance, regulatory

Qualifications

• Minimum of 6 years of progressive experience in information risk management, information security, technology risk, cybersecurity, business continuity, operational resilience, audit, compliance, or related risk management functions.
• Knowledge of information security, technology risk management, business continuity and disaster recovery management, risk assessment methodologies, and control frameworks.
• Strong understanding of information risk management practices, risk governance principles, and second line of defense responsibilities.
• Excellent written and verbal communication skills, with the ability to convey complex technical and risk concepts to non-technical audiences.
• Proven stakeholder management and relationship-building skills across multiple business functions.
• Ability to analyze complex situations, identify key risks and control gaps, and provide practical recommendations.

Responsibilities

• Support the Directors in delivering the second line of defense Information Risk Management oversight across North America.
• Conduct independent oversight and challenge activities across risk areas including business continuity and disaster recovery management, CAPs, and RCSAs.
• Review and assess information security, technology risk, cyber security, and operational resilience controls for alignment with risk frameworks.
• Support identification, escalation, and monitoring of information risks and emerging threats.
• Provide risk guidance to stakeholders to promote sound risk management practices and informed decisions.
• Maintain awareness of evolving laws, regulations, industry standards across jurisdictions.
• Promote a strong risk culture and ethical business practices.

Skills

Information risk management

Information security

Cybersecurity

Business continuity

Regulatory compliance

Stakeholder management

Risk assessment

Risk governance

Communication

Job description

Manulife/John Hancock is seeking an Information Risk Manager to support the North America risk oversight program in the 2nd line of defense. The role focuses on information security, technology risk, business continuity, and disaster recovery across U.S.

and Canada, and requires coordinating with first-line teams to identify and mitigate risks. The successful candidate will lead independent reviews, challenge control effectiveness, and advise senior leaders on risk governance, regulatory