Information risk management senior specialist

We are a leading financial services provider committed to making decisions easier and lives better for our customers and colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. To help us stand out, we help you step up, because when colleagues are healthy, respected and meaningfully challenged, we all thrive. Discover how you can grow your career, make impact and drive real change with our Winning Team today.

Working Arrangement: Hybrid

Job Description

The opportunity

The Group Functions IT Information Security and Business Resilience Team is actively searching for an experienced Information Risk Management Senior Specialist, to be responsible for applying identity access security risk knowledge and expertise to assist with IT information security First Line of Defense activities, thereby strengthening Manulife's corporate segment information security posture and ensuring regulatory compliance.

We are seeking an expert in providing comprehensive Identity Access Management services, including offering guidance and advice to enhance our security framework, with the ability to ensure successful implementation and delivery of IAM programs.

Responsibilities

• Enable your business and IT partners in Manulife’s Corporate Segment (Group Functions) to recognize and manage their information and access risks in an ambitious and dynamic business environment.
• Participate in key projects and initiatives ensuring information and access risks are always considered.
• Assist business partners and IT colleagues identify and address their information & access security risks by performing access security baseline reviews for project setup and ensuring that regular access reviews are done moving forward.
• Provide governance to ensure controls are in place in relation to our Identity and Access Management Standard.
• Ensure that access to applications, data and information are authorized and reviewed on a regular basis, promoting the importance of access security throughout the organization.
• Perform Access Security Baseline reviews to ensure that accesses to application and data are reviewed and signed off prior to Production deployment.
• Ensure Separation of Duties (SOD) are implemented in application, infrastructure, and data accesses to prevent unauthorized accesses and activities.
• Work together with Business and Application Support team members to understand the access framework of their applications and onboard these applications to be reviewed on an automated and regulated frequency.
• Assist in performing access review validation activities to ensure data integrity and accuracy of Access reviews.
• Provide application access security consulting services to IT and other team members.
• Support operational security activities including oversight of ongoing segment specific access security processes (e.g., incident response, audit support, ad hoc queries, periodic access reviews).
• Highlight gaps and areas for improvement to increase security, and strengthen risk and control posture.
• Assist in ensuring partners are advised and compliant to new and existing controls.
• Stay informed on emerging technologies, key business drivers, evolving threats and opportunities from both the business and within information access security field.

What we are looking for

• University degree in Computer Science, Information Technology, Software Engineering, Business Administration, or relevant educational and professional experience.
• Four years or more of experience within a combination of relevant disciplines in the field of Risk Management, application security and Identity and Access Management.
• Familiarity with application and data flows, SaaS, PaaS and IaaS.
• Experience with Risk Management, highlighting gaps and managing resolutions.
• Understanding of Azure Identity model and governance is good to have.
• Strong in data analysis, requirement gathering and problem-solving skills.
• Resourceful and able to work independently while still being part of a geographically diverse team.
• Excellent verbal and written communication, facilitation, and interpersonal skills.
• Influence behavior to reduce risks and foster a strong information access security risk management culture.
• Takes initiative and complete ownership of tasks and issues as needed.
• Quick learner and able to adapt to unforeseen changes and needs.

What can we offer you?

• A competitive salary and benefits packages.
• A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.
• A focus on growing your career path with us.
• Flexible work policies and strong work-life balance.
• Professional development and leadership opportunities.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, Canada, we operate as Manulife across our offices in Asia, Canada, and Europe, and primarily as John Hancock in the United States.

Manulife is an Equal Opportunity Employer. At Manulife/John Hancock, we embrace our diversity and strive to attract, develop and retain a workforce that is as diverse as the customers we serve.