We are seeking a Director, Information Security & Risk Management to lead the Information Risk Management (IRM) program for the Canadian segment. This role is responsible for driving effective risk governance, aligning security with business priorities, and delivering measurable outcomes that support enterprise decision-making.

You will partner closely with global security teams, enterprise risk, and business technology leaders to integrate security into day-to-day operations and support strategic initiatives.

Position Responsibilities:
Information Risk Management & Governance

• Lead and evolve the IRM program aligned to enterprise risk appetite and global frameworks
• Oversee identification, assessment, mitigation, and monitoring of information security risks
• Drive continuous improvement initiatives to enhance security maturity
• Manage issue remediation and corrective action plans to ensure timely resolution
• Monitor key risk indicators (KRIs) to support risk-informed decision-making

Metrics, Reporting & Executive Engagement

• Deliver clear, business-focused risk reporting to senior leaders and governance forums
• Translate technical security risks into actionable business insights
• Support risk committees with accurate and timely reporting
• Improve reporting efficiency through automation and data quality enhancements
• Contribute to budgeting, forecasting, and portfolio governance activities

Policies, Standards & Compliance

• Support development, maintenance, and communication of security policies and standards
• Ensure alignment with regulatory and organizational requirements
• Promote consistent adoption of security practices across the organization

Business Partnership & Collaboration

• Act as a trusted advisor to business leaders on security and risk topics
• Align cybersecurity priorities with business objectives and enterprise strategy
• Represent the Canadian segment in global security initiatives and planning

Leadership & Team Development

• Lead and develop a high-performing information security team
• Provide coaching, mentorship, and growth opportunities
• Foster a collaborative, inclusive, and accountable team culture

Required Qualifications:

• Experience leading information security and/or information risk management programs
• Knowledge of security risk domains such as security architecture, vulnerability management, application security, and cloud security
• Experience in program or portfolio management with strong organizational and delivery skills
• Strong problem-solving, communication, and stakeholder management abilities

Preferred Qualifications:

• Professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent
• Experience working in a matrixed, cross-functional environment
• Ability to manage multiple priorities and drive outcomes across diverse stakeholders

When you join our team:

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

The role being advertised is an existing vacancy.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html .

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact hr@manulife.com .

Referenced Salary Location

Toronto, Ontario

Working Arrangement

Hybrid

Salary range is expected to be between

$113,260.00 CAD - $210,340.00 CAD

Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact hr@manulife.com for the salary range for your location.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact hr@manulife.com for more information about U.S.-specific paid time off provisions.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement .