IT Risk Governance & Oversight Specialist

We’re looking for a Risk Governance & Oversight Specialist to join our Global Tech team at MGS. In this role, you will play a key, dynamic role in supporting GWAM Information Risk Management team in delivering governance, key risk indicator, vulnerability management, process oversight, and strategic change initiatives. The specialist will strengthen risk and security oversight by monitoring key indicators, evaluating control and vulnerability data, coordinating remediation, and translating findings into clear management reporting.

The successful candidate will combine information risk knowledge with strong analytical, reporting, and stakeholder-management skills. This individual will interpret enterprise standards, organize data from multiple sources, develop meaningful insights and dashboards, and identify opportunities to improve or automate governance processes. The role requires curiosity, adaptability, and a willingness to learn and responsibly apply emerging technologies, including artificial intelligence, to improve efficiency, data quality, and risk oversight.

Have the skills and experience for the job? Learn more about it below!

Position Responsibilities:

• Support governance and oversight activities across the information risk, key risk indicator, vulnerability management, process governance, and change management programs.

• Interpret enterprise risk and security standards, translate requirements into practical actions, and monitor compliance with established controls and processes.

• Monitor vulnerability scanning, asset health, remediation progress, and related reporting; identify barriers and coordinate resolution or escalation with accountable stakeholders.

• Collect, validate, organize, and analyze data from multiple sources to identify trends, control gaps, root causes, and areas requiring management attention.

• Develop clear metrics, reports, Power BI dashboards, data-flow diagrams, and presentations that improve management visibility and support risk-informed decision-making.

• Communicate status, risks, issues, dependencies, and remediation concerns clearly to business and technology stakeholders and management.

• Partner with operational teams, project teams, control owners, and business stakeholders to assess risk, clarify evidence requirements, and support timely remediation.

• Provide guidance and training on security controls, compliance expectations, vulnerability management, and governance processes.

• Maintain and enhance policies, procedures, reporting solutions, and governance documentation to support consistent execution and audit readiness.

• Identify and implement opportunities to automate, streamline, and improve governance, monitoring, and reporting processes, including the responsible use of artificial intelligence and other emerging technologies where appropriate.

Required Qualifications:

• Demonstrated ability to collect, reconcile, analyze, and report complex data with a high level of accuracy and attention to detail.

• Intermediate to advanced proficiency in Microsoft Excel, including pivot tables and data analysis; experience with Power BI or similar business intelligence tools.

• Interest in automation and a demonstrated willingness to learn and responsibly use artificial intelligence tools to improve processes, analysis, and reporting.

• Strong written and verbal communication skills, with the ability to explain risk and technical information in clear business terms.

• Effective consulting, decision-making, influencing, and stakeholder-management skills.

• Strong organizational and time-management skills, with the ability to manage multiple priorities and meet reporting deadlines.

• Ability to work independently, exercise sound judgment, adapt to changing technology, and collaborate effectively in a global team environment.

• Proficient in English, both verbal and written

• Amenable to work UP Ayala Technohub (Quezon City)

• Amenable to work on a hybrid set-up (3x a week onsite)

• Amenable to work in any shift schedule assigned (night shift; but flexible depending on business need)

Preferred Qualifications:

• Experience in information risk, cybersecurity, governance, compliance, vulnerability management, audit, or a related field.

• Familiarity or understanding of information risk management, cybersecurity principles, control frameworks, and governance practices.

When you join our team:

• We’ll empower you to learn and grow the career you want.

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].