Senior Consultant, Information Risk

Manulife • Waterloo, ON

10d • CA$113,000 - CA$163,000 • Hybrid

About The Position

Protect What Matters Most Join Manulife’s Global Wealth & Asset Management (GWAM) Information Risk Team, where you'll play a critical role in safeguarding business initiatives, emerging technologies, and cloud-based solutions. As a trusted advisor and risk professional, you'll help ensure security and risk management principles are embedded into technology decisions from design through implementation. This is an exciting opportunity for an experienced information security professional who thrives at the intersection of cybersecurity, cloud technologies, risk management, and business enablement.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in Information Security, Cybersecurity, or Information Risk Management.
• Experience conducting security assessments, risk evaluations, IT controls reviews, or audit activities.
• Strong understanding of cloud security and IaaS, PaaS, and SaaS environments.
• Knowledge of cybersecurity frameworks and standards, including: NIST Cybersecurity Framework (CSF) ISO 27001 CIS Controls
• Understanding of AI fundamentals, principles, and emerging technologies.
• Excellent communication, facilitation, and stakeholder management skills.
• Strong analytical, problem-solving, and organizational abilities.

Nice To Haves

• CISSP
• CISM
• CRISC
• CISA
• CCSP
• GSEC
• Financial services, wealth management, or asset management industry experience.
• Information risk management, vendor risk management, project risk management, or IT audit expertise.
• Experience supporting cloud transformation and cybersecurity initiatives.
• Ability to influence stakeholders and drive a strong risk management culture across complex organizations.

Responsibilities

• Lead information risk assessments for technology initiatives, cloud solutions, and IT projects.
• Identify cybersecurity risks, threats, and vulnerabilities, and recommend practical mitigation strategies.
• Partner with business, technology, architecture, and project teams to ensure security controls are embedded early in the solution lifecycle.
• Advise stakeholders on information security requirements, risk management practices, and regulatory expectations.
• Design, document, and evaluate security controls for cloud and on-premises environments.
• Support audits, regulatory reviews, control assessments, and risk management activities.
• Deliver training and guidance to stakeholders on information risk assessment processes and cybersecurity best practices.
• Help foster a strong security culture by influencing risk-aware decision-making across the organization.

Benefits

• health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans.
• various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources.
• holidays, vacation, personal, and sick days
• full range of statutory leaves of absence

What This Job Offers

• Job Type: Full-time
• Career Level: Senior