Director Information Security & Risk Management

Manulife • Waterloo, ON

7d • CA$113,260 - CA$210,340 • Hybrid

About The Position

We are seeking a Director, Information Security & Risk Management to lead the Information Risk Management (IRM) program for the Canadian segment. This role is responsible for driving effective risk governance, aligning security with business priorities, and delivering measurable outcomes that support enterprise decision-making. You will partner closely with global security teams, enterprise risk, and business technology leaders to integrate security into day-to-day operations and support strategic initiatives.

Requirements

• Experience leading information security and/or information risk management programs
• Knowledge of security risk domains such as security architecture, vulnerability management, application security, and cloud security
• Experience in program or portfolio management with strong organizational and delivery skills
• Strong problem-solving, communication, and stakeholder management abilities

Nice To Haves

• Professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent
• Experience working in a matrixed, cross-functional environment
• Ability to manage multiple priorities and drive outcomes across diverse stakeholders

Responsibilities

• Lead and evolve the IRM program aligned to enterprise risk appetite and global frameworks
• Oversee identification, assessment, mitigation, and monitoring of information security risks
• Drive continuous improvement initiatives to enhance security maturity
• Manage issue remediation and corrective action plans to ensure timely resolution
• Monitor key risk indicators (KRIs) to support risk-informed decision-making
• Deliver clear, business-focused risk reporting to senior leaders and governance forums
• Translate technical security risks into actionable business insights
• Support risk committees with accurate and timely reporting
• Improve reporting efficiency through automation and data quality enhancements
• Contribute to budgeting, forecasting, and portfolio governance activities
• Support development, maintenance, and communication of security policies and standards
• Ensure alignment with regulatory and organizational requirements
• Promote consistent adoption of security practices across the organization
• Act as a trusted advisor to business leaders on security and risk topics
• Align cybersecurity priorities with business objectives and enterprise strategy
• Represent the Canadian segment in global security initiatives and planning
• Lead and develop a high-performing information security team
• Provide coaching, mentorship, and growth opportunities
• Foster a collaborative, inclusive, and accountable team culture

Benefits

• health
• dental
• mental health
• vision
• short- and long-term disability
• life and AD&D insurance coverage
• adoption/surrogacy and wellness benefits
• employee/family assistance plans
• various retirement savings plans (including pension and a global share ownership plan with employer matching contributions)
• financial education and counseling resources
• generous paid time off program in Canada includes holidays, vacation, personal, and sick days
• full range of statutory leaves of absence

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed