IT Risk Governance & Oversight Specialist

Manulife; Quezon City; Hybrid; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Manulife is seeking a Risk Governance & Oversight Specialist to join the Global Tech team within GWAM Information Risk Management. You will help deliver governance, KPI monitoring, vulnerability management, and change initiatives while translating findings into clear management reporting.

The successful candidate will combine information risk knowledge with strong analytical, reporting, and stakeholder-management skills, organizing data from multiple sources, developing insights and dashboards,

Qualifications

• Experience collecting, reconciling, analyzing and reporting data with high accuracy.
• Proficiency in Excel with pivot tables and data analysis; BI tool experience.
• Interest in automation and responsible use of AI to improve processes.
• Strong written and verbal communication to explain risk clearly.
• Effective consulting and stakeholder-management skills.

Responsibilities

• Support governance and oversight activities across information risk programs.
• Interpret risk and security standards and monitor compliance with controls.
• Monitor vulnerability scanning, asset health, remediation progress, and reporting.
• Analyze data to identify trends, gaps, root causes, and management actions.
• Develop metrics, Power BI dashboards, data-flow diagrams for decision-making.
• Communicate status and remediation plans to stakeholders and management.
• Collaborate with teams to assess risk, gather evidence, and enable remediation.
• Provide guidance on security controls and governance processes.
• Maintain and improve governance documentation for audit readiness.
• Identify opportunities to automate governance and reporting with AI where appropriate.

Skills

Excel

Pivot Tables

Data Analysis

Power BI

Stakeholder Management

English Proficiency

Analytical Thinking

Tools

Power BI

Job description

We’re looking for a Risk Governance & Oversight Specialist to join our Global Tech team at MGS. In this role, you will play a key, dynamic role in supporting GWAM Information Risk Management team in delivering governance, key risk indicator, vulnerability management, process oversight, and strategic change initiatives. The specialist will strengthen risk and security oversight by monitoring key indicators, evaluating control and vulnerability data, coordinating remediation, and translating findings into clear management reporting.

The successful candidate will combine information risk knowledge with strong analytical, reporting, and stakeholder-management skills. This individual will interpret enterprise standards, organize data from multiple sources, develop meaningful insights and dashboards, and identify opportunities to improve or automate governance processes. The role requires curiosity, adaptability, and a willingness to learn and responsibly apply emerging technologies, including artificial intelligence, to improve efficiency, data quality, and risk oversight.

Have the skills and experience for the job?

Position Responsibilities

• Support governance and oversight activities across the information risk, key risk indicator, vulnerability management, process governance, and change management programs.
• Interpret enterprise risk and security standards, translate requirements into practical actions, and monitor compliance with established controls and processes.
• Monitor vulnerability scanning, asset health, remediation progress, and related reporting; identify barriers and coordinate resolution or escalation with accountable stakeholders.
• Collect, validate, organize, and analyze data from multiple sources to identify trends, control gaps, root causes, and areas requiring management attention.
• Develop clear metrics, reports, Power BI dashboards, data-flow diagrams, and presentations that improve management visibility and support risk-informed decision-making.
• Communicate status, risks, issues, dependencies, and remediation concerns clearly to business and technology stakeholders and management.
• Partner with operational teams, project teams, control owners, and business stakeholders to assess risk, clarify evidence requirements, and support timely remediation.
• Provide guidance and training on security controls, compliance expectations, vulnerability management, and governance processes.
• Maintain and enhance policies, procedures, reporting solutions, and governance documentation to support consistent execution and audit readiness.
• Identify and implement opportunities to automate, streamline, and improve governance, monitoring, and reporting processes, including the responsible use of artificial intelligence and other emerging technologies where appropriate.

Required Qualifications

• Demonstrated ability to collect, reconcile, analyze, and report complex data with a high level of accuracy and attention to detail.
• Intermediate to advanced proficiency in Microsoft Excel, including pivot tables and data analysis; experience with Power BI or similar business intelligence tools.
• Interest in automation and a demonstrated willingness to learn and responsibly use artificial intelligence tools to improve processes, analysis, and reporting.
• Strong written and verbal communication skills, with the ability to explain risk and technical information in clear business terms.
• Effective consulting, decision-making, influencing, and stakeholder-management skills.
• Strong organizational and time-management skills, with the ability to manage multiple priorities and meet reporting deadlines.
• Ability to work independently, exercise sound judgment, adapt to changing technology, and collaborate effectively in a global team environment.
• Proficient in English, both verbal and written
• Amenable to work UP Ayala Technohub (Quezon City)
• Amenable to work on a hybrid set-up (3x a week onsite)
• Amenable to work in any shift schedule assigned (night shift; but flexible depending on business need)

Preferred Qualifications

• Experience in information risk, cybersecurity, governance, compliance, vulnerability management, audit, or a related field.
• Familiarity or understanding of information risk management, cybersecurity principles, control frameworks, and governance practices.

When You Join Our Team

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife And John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [e-mail].

Working Arrangement

Hybrid