Manager - Vendor Governance Management (Risk)

Manulife John Hancock; Quezon City; On-site; PHP 1,800,000 - 3,600,000; Full time

Job summary

Manulife John Hancock is seeking a Manager, Vendor Governance Management (Risk) to lead a team responsible for vendor risk governance lifecycle across intake, due diligence, monitoring, and remediation. You will translate policy and regulatory requirements into effective controls and partner with privacy, information security, compliance and sourcing.

The role emphasizes risk-based assessments, corrective actions, incident management, data quality, and executive reporting to senior management

Qualifications

• Bachelor’s degree in business, risk management, finance, procurement, information systems or related discipline.
• Postgraduate study is an advantage.

Responsibilities

• Own day-to-day governance and delivery of vendor risk assessments including inherent risk screening, due diligence, reassessments, renewals and event-driven reviews.
• Coordinate input from Privacy, Information Security, Compliance, Legal, Sourcing and business owners to resolve complex cases.
• Escalate material risks, policy exceptions and overdue actions through governance channels.
• Lead governance of corrective action plans with ownership, target dates and evidence standards.
• Manage third-party risk incidents and emerging-risk monitoring with root-cause analysis and remediation.
• Prepare executive insights for monthly/quarterly reviews and regulatory inquiries.
• Drive process standardization, automation and continuous improvement across intake, assessment, and reporting.
• Act as the operational subject-matter expert for vendor risk governance and communicate requirements to stakeholders.
• Partner with Procurement so risk results inform vendor selection and contracting strategy.
• Support audits, regulatory reviews and management attestations with complete evidence.
• Build trusted relationships with onshore partners and risk SMEs.

Skills

Vendor governance

Risk management

Procurement

Regulatory knowledge

Stakeholder management

Leadership

Education

Undergraduate degree in business/risk management/finance/procurement/info systems

Job description

The Manager, Vendor Governance Management (Risk) leads a team responsible for consistent, timely, and risk-based execution of the vendor governance lifecycle. The role translates policy and regulatory requirements into effective operational controls across intake, inherent risk stratification, due diligence, ongoing monitoring, renewal and reassessment, issue remediation, and closure. units.

Role Responsibilities

1. Risk Governance and Assessment Oversight

• Own the day-to-day governance and delivery of vendor risk assessments, including inherent risk screening, due diligence, reassessments, renewals, material changes, and event-driven reviews.
• Ensure assessments are risk-based, evidence-supported, complete, and aligned with applicable outsourcing and third-party risk policies, standards, procedures, and jurisdictional requirements.
• Provide independent review and challenge on risk ratings, control gaps, residual risk, compensating controls, and proposed risk acceptance or treatment decisions.
• Coordinate with Privacy, Information Security, Business Continuity, Compliance, Legal, Sourcing, Procurement, and business owners to obtain timely specialist input and resolve complex cases.
• Escalate material risks, policy exceptions, overdue actions, control failures, and unresolved ownership issues through the appropriate governance channels.

2. Corrective Action, Incident, and Emerging Risk Management

• Lead governance of corrective action plans, including clear ownership, achievable target dates, evidence standards, aging controls, escalation thresholds, and closure validation.
• Oversee third-party risk incidents and emerging-risk monitoring, ensuring impact assessment, stakeholder notification, root-cause analysis, remediation, and follow-through.
• Use external risk intelligence and internal data to identify financial, cyber, operational, reputational, concentration, geographic, and business-continuity concerns that require action.
• Ensure highest-risk and critical vendors receive appropriate monitoring intensity, contingency planning, exit considerations, and senior-management visibility.

3. Operational Performance, Data Quality, and Reporting

• Manage team capacity, work allocation, priorities, and service levels across markets, segments, and assessment types, balancing urgency, risk, and customer impact.
• Maintain reliable management information covering assessment volumes, turnaround time, aging, backlog, overdue corrective actions, risk distribution, quality results, and recurring control themes.
• Validate the accuracy, completeness, and traceability of vendor risk data and supporting evidence in the systems of record before reporting or governance submission.
• Prepare concise executive insights and path-to-green actions for monthly operating reviews, quarterly business reviews, risk forums, audits, and regulatory inquiries.
• Drive process standardization, automation, and continuous improvement across intake, assessment, quality assurance, tracking, communications, and reporting.

4. Stakeholder and Regulatory Partnership

• Act as the operational subject-matter expert for vendor risk governance and clearly communicate requirements, decisions, dependencies, and consequences to business and functional stakeholders.
• Partner with Procurement and Sourcing so risk results inform vendor selection, contracting strategy, protective clauses, renewals, remediation commitments, and exit decisions.
• Support audits, regulatory reviews, internal control testing, and management attestations with complete, accurate, and timely evidence.
• Build trusted relationships with onshore partners, market stakeholders, vendor owners, and risk subject-matter experts while maintaining appropriate independence and constructive challenge.

5. People Leadership and Capability Building

• Set clear performance expectations and measurable goals for analysts and specialists, including productivity, quality, timeliness, risk judgment, documentation, and stakeholder management.
• Coach team members through regular one-on-ones, case reviews, calibration sessions, quality feedback, and individual development plans.
• Build cross-training, succession, and backup coverage to reduce key-person dependency and maintain continuity during peaks, transitions, and absences.
• Create an accountable and inclusive team culture that encourages early escalation, continuous learning, collaboration, and ownership of outcomes.
• Identify skills gaps and deliver targeted learning on policy, regulatory expectations, risk domains, systems, data analysis, executive communication, and decision quality.

Qualifications and Experience

• Undergraduate degree in business, risk management, finance, procurement, information systems, or a related discipline; relevant postgraduate study is an advantage.
• Typicaly 8 or more years of progressive experience in third-party risk, vendor governance, operational risk, procurement, compliance, outsourcing governance,