Director of Cybersecurity Risk Oversight at Manulife responsible for cybersecurity governance, risk assessment, and policy development. Collaborate with multidisciplinary teams to ensure compliance with strategic objectives.
Responsibilities
Lead the independent oversight of cybersecurity risks, ensuring robust alignment with Manulife’s standards and strategic objectives.
Provide expert guidance to uphold the integrity of the cybersecurity framework.
Collaborate with multidisciplinary teams to gain a comprehensive understanding of Manulife’s technology strategy, operations, and regulatory environment.
Proactively identify and assess areas of emerging and heightened risk related to information and cybersecurity.
Evolve and enhance Line 2 oversight frameworks to effectively manage and mitigate risks associated with information and cybersecurity, ensuring these frameworks remain agile and responsive to new challenges.
Oversee Line 1 risk, compliance, and operational metrics, and actively participate in the development and maintenance of Line 2’s information and cybersecurity risk measurement programs.
Ensure these metrics are comprehensive and support strategic risk management initiatives.
Conduct comprehensive and in-depth assessments of technology programs, particularly those with third-party dependencies, to ensure the safeguarding of organizational assets.
Utilize advanced risk assessment methodologies to identify vulnerabilities and implement effective mitigation strategies.
Execute independent and objective challenges to existing cybersecurity measures across critical risk domains, including Identity & Access Management, Cloud Security, Network Security and Data Security.
Requirements
7-10 years in cybersecurity or technology risk management and/or First Line cybersecurity operations
Experience with critical security risk domains such as cloud security, network security, identity and access management, and third-party security
Commitment to continuous learning of cybersecurity risks, threat landscape, and best practices, with a focus on effective and efficient governance and oversight
Experience in developing enterprise policies & standards, conducting risk assessments, and a strong understanding of common risk frameworks, such as NIST Cybersecurity Framework and 800-53, ISO 27001/27002, and PCI DSS 4.0
Ability to work cross-functionally, aligning risk management with broader business strategies
Excellent verbal and written communication skills, with a focus on technical writing. Must be able to effectively convey complex risk concepts and insights to senior leadership and business collaborators.
Skilled in crafting clear and concise reports, presentations, and documentation to facilitate informed decision-making
Expertise in engaging with diverse collaborators to integrate their feedback into risk management practices
Ability to effectively manage crises related to cybersecurity risks, demonstrating resilience and adaptability
Keen interest in emerging technologies and innovations, with the ability to assess potential risks and opportunities.
Benefits
health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage
adoption/surrogacy and wellness benefits
employee/family assistance plans
various retirement savings plans (including pension and a global share ownership plan with employer matching contributions)
financial education and counseling resources
generous paid time off program in Canada (including holidays, vacation, personal, and sick days)
full range of statutory leaves of absence
Job title
Director, Cyber Security Risk Oversight – Global Risk
Data Center Security Officer responsible for conducting patrols and controlling access. Ensuring security and safety in data center facilities while monitoring surveillance and reporting issues.
Senior Security Auditor managing audit program operations for global security audits at NTT DATA. Focusing on coordinating, executing audits, producing reports and tracking remediation.
Security Architect in Transactions domain ensuring cybersecurity for Payments and Financial markets. Collaborating with teams to enhance compliance and security practices.
Modern Infrastructure and Security Architect at MUFG responsible for directing cyber security initiatives. Collaborating with engineers to enhance security features and tools across the organization.
Senior Federal Technical Program Manager driving execution of federal cloud operations. Facilitating engagements between HPE's CSP and MSP teams while ensuring compliance and operational efficiency.
Cloud Cybersecurity Engineer supporting multi - cloud environments for critical missions in alignment with the U.S. Air Force. Roles include overseeing security authorizations and collaborating with government teams.
Program Security Manager overseeing security and compliance for mission applications in the US. Managing security programs and leading facility operations at Aurora and Philadelphia locations.
Information System Security Manager providing cybersecurity and RMF support for DoD systems and applications. Collaborating with military, government, and contractor personnel to ensure national security and systems compliance.
AI Security Engineer focusing on identifying and mitigating AI vulnerabilities. Involves research, development, and implementation of adversarial machine learning algorithms.
Vice President overseeing DHS & National Security Accounts at ITC Federal. Driving growth, managing P&L, and building strategic relationships across federal contracting.