Information Risk Management Analyst

The Senior Information Risk Management (IRM) Analyst will support GWAM Risk – Cybersecurity Operations by performing information risk assessments, executing established risk management workflows, and supporting key operational activities such as issue and corrective action plan management, Key Risk Indicator (KRI) reporting, and control monitoring. This role will also help drive process efficiency and continuous improvement through documentation, data analysis, automation, and collaboration with stakeholders across the organization.

Position Responsibilities: 

• Execute documented process workflows to perform General Information Risk Management (IRM) services.

• Document processes and workflows and maintain/update the existing process documents.

• Contribute to driving efficiencies and identifying enhancement opportunities across existing processes and techniques through data analytics, automation, and other process improvement ideas.

• Perform activities assigned to GWAM Risk – Cybersecurity Operations.

• Perform information risk assessments in compliance with the global Information Risk Assessment methodology, policies, and standards.

• Perform Key Risk Indicator (KRI) management activities.

• Perform control monitoring and conduct risk assessments, including but not limited to firewall, Zscaler exemptions, VDI, Azure portal access, software, removable media access, and network security group requests.

• Ensure monthly reports and ad hoc requests are responded to and delivered in accordance with SLAs

• Drive projects for improving process efficiency and automation. Contribute to and collaborate on the development and improvement of tools.

• Research, collect, and analyze qualitative data required for risk assessments.

• Track and manage identified information risk issues and associated corrective action plans (CAPs), ensuring timely resolution and closure in alignment with governance requirements.

• Actively contributes to knowledge-sharing exercises.

• Work independently on assigned tasks while providing regular progress updates.

• Candidate must be flexible to work in the morning or rotating shifts in a hybrid environment, as required in our Quezon City Office.

Required Qualifications:

• At least one year of experience in a corporate environment.

• Strong knowledge of security controls, frameworks, regulatory requirements, standards, and concepts (e.g., ISO 27001/27002, MAS), as well as industry best practices (e.g., OWASP, CSA, CIS).

• Bachelor's degree in Computer Science, Information Technology or equivalent.

• Post-secondary education in information security, computer science, information technology, software engineering, or equivalent professional education.

• Must meet current job expectations and performance metrics for internal applicants.

• Exceptional attention to detail, ensuring accuracy and completeness in risk documentation and issue tracking.

• Strong interpersonal and collaboration skills, with the ability to effectively engage with diverse teams and stakeholders.

• Strong problem-solving and analytical skills, with an innovative mindset.

• A team player who can also work independently.

When you join our team:

• We’ll empower you to learn and grow the career you want. 

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words. 

• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].