The Manager, Technology Risk Governance, Compliance & Reporting will support Enterprise Technology Services by managing technology and cyber risk metrics across governance, compliance, monitoring, validation, and reporting activities. This role contributes to Manulife’s mission by helping ensure technology and cybersecurity risks are accurately measured, reported, and managed in alignment with enterprise risk appetite, regulatory expectations, and governance standards. The successful candidate will partner with Technology, Cybersecurity, Risk, Audit, and Compliance stakeholders to strengthen reporting integrity, support audit readiness, and drive consistent risk governance practices. This is an opportunity to influence executive and Board-level reporting while helping mature technology and cyber risk oversight across ETS.
Position Responsibilities:
Manage the lifecycle of technology and cyber risk metrics, including maintenance, monitoring, reporting, validation, and annual reviews.
Govern compliance to technology and cybersecurity metrics, ensuring alignment to risk appetite, governance standards, and enterprise requirements.
Monitor metric performance and compliance trends, identify emerging risks, and coordinate remediation activities for metric breaches.
Maintain Tier 1 metrics and supporting data within enterprise governance, risk, and control systems.
Partner with Technology, Cybersecurity, and Risk stakeholders to ensure metric accuracy, data quality, and reporting integrity.
Support audit, regulatory, and governance reviews through documentation, evidence, and traceable reporting.
Drive consistency in metrics governance, compliance monitoring, and risk reporting processes across ETS.
Prepare executive and Board-level reporting on technology and cyber risk performance, breaches, trends, and remediation activities.
Required Qualifications:
7–10 years of experience in technology risk, cyber risk, operational risk, governance, compliance, or enterprise risk management.
Experience managing metrics, reporting, risk, compliance, or control-based programs in a structured governance environment.
Strong understanding of technology and cyber risk management, control effectiveness, risk metrics, and enterprise risk management principles.
Knowledge of cybersecurity concepts, including threats, vulnerabilities, security controls, risk assessments, incident management, and regulatory expectations.
Demonstrated ability to manage end-to-end metrics governance, reporting, validation, and compliance processes in an audit-ready environment.
Strong analytical and problem-solving skills with a focus on data quality, accuracy, completeness, and risk-based decision-making.
Experience working with governance, risk and control platforms, cybersecurity reporting tools, or enterprise reporting solutions.
Strong stakeholder management and communication skills, with the ability to influence and collaborate across Technology, Cybersecurity, Risk, Audit, and Compliance functions.
Preferred Qualifications:
Experience preparing executive, committee, or Board-level technology and cyber risk reporting.
Experience working in financial services, insurance, banking, or another highly regulated environment.
Knowledge of technology risk, cyber risk, control, or governance frameworks.
Experience supporting audit, regulatory, compliance, or enterprise risk reviews.
Professional certification such as CISA, CISM, CRISC, CISSP, CGRC, or equivalent is considered an asset.
When you join our team:
We’ll empower you to learn and grow the career you want.
We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
As part of our global team, we’ll support you in shaping the future you want to see.
The role being advertised is an existing vacancy.
About Manulife and John Hancock
Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.
Manulife is an Equal Opportunity Employer
At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.
It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].
Referenced Salary Location
Toronto, OntarioWorking Arrangement
Salary range is expected to be between
$113,000.00 CAD - $163,000.00 CADEmployees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact [email protected] for the salary range for your location.
Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact [email protected] for more information about U.S.-specific paid time off provisions.
We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.
Skills Required
- 7-10 years experience in technology risk, cyber risk, operational risk, governance, compliance, or enterprise risk management
- Experience managing metrics, reporting, risk, compliance, or control-based programs in a structured governance environment
- Strong understanding of technology and cyber risk management, control effectiveness, risk metrics, and enterprise risk management principles
- Knowledge of cybersecurity concepts including threats, vulnerabilities, security controls, risk assessments, and incident management
- Demonstrated ability to manage end-to-end metrics governance, reporting, validation, and compliance processes in an audit-ready environment
- Strong analytical and problem-solving skills with focus on data quality, accuracy, and risk-based decision-making
- Experience working with governance, risk and control platforms, cybersecurity reporting tools, or enterprise reporting solutions
- Strong stakeholder management and communication skills with ability to influence across Technology, Cybersecurity, Risk, Audit, and Compliance
- Experience preparing executive, committee, or Board-level technology and cyber risk reporting
- Experience in financial services, insurance, banking, or another highly regulated environment
- Knowledge of technology risk, cyber risk, control, or governance frameworks
- Experience supporting audit, regulatory, compliance, or enterprise risk reviews
- Professional certification such as CISA, CISM, CRISC, CISSP, CGRC, or equivalent
Manulife Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Manulife and has not been reviewed or approved by Manulife.
-
Healthcare Strength — Healthcare coverage is portrayed as comprehensive, spanning medical, dental, prescription drugs, vision, critical illness, and short- and long-term disability. Mental-health support is emphasized via EAP-style services and high annual coverage limits in some regions, alongside wellness programs and navigation tools.
-
Retirement Support — Retirement offerings are positioned as a meaningful part of total rewards, including group RRSP/defined contribution pension options and employer matching in some cases. Ownership-related programs such as share purchase/stock options are also described as available for eligible employees.
-
Flexible Benefits — Benefits are described as robust and flexible, with customizable packages and spending-account style options in some plans. Digital tools (mobile app/claims) and reward-linked wellness programs are framed as making benefits easier to use and more engaging.
Manulife Insights
What We Do
Manulife is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, we operate as Manulife across our offices in Canada, Asia, and Europe, and primarily as John Hancock in the United States. We have more than 40,000 employees, over 116,000 agents serving ~34 million customers worldwide, and over $1.3 trillion in assets under management and administration. Visit www.Manulife.com to find out more. For Manulife terms of use, please visit http://bit.ly/SM_Terms
