Senior Business Analyst

We are seeking a detail-oriented and proactive Business Analyst to join our Vendor Information Security Management team. In this role, you will support the end-to-end coordination of vendor information risk assessments, including vendor onboarding, contract and service validation, assessment scheduling, documentation management, reporting, and stakeholder communication. You will act as a key liaison between vendors, internal business partners, and Information Security teams to ensure vendor information is accurate, assessments are completed efficiently, and risk management processes remain well organized and compliant.
Primary Responsibilities:

• Manage Vendor Information Security Management communication channels, respond to inquiries, follow up on outstanding requirements, and coordinate activities between vendors, business contacts, contract managers, and internal review teams.
• Create and maintain vendor profiles, confirm active or renewing contracts, validate the scope of services and vendor contact information, and ensure records are accurate across Archer, ProcessUnity, and internal trackers.
• Initiate new vendor assessments and reassessments, determine the appropriate in-scope questionnaires, verify supporting documentation, and coordinate additional reviews involving Cloud Architecture, Business Unit Security Officers, Business Continuity Management, Artificial Intelligence, and other relevant teams.
• Develop and maintain the annual Vendor Information Risk Assessment schedule, assign assessments to team members, monitor business acknowledgments, and reconcile assessment and vendor information across systems.
• Prepare monthly reporting, validate cases where an assessment is not required, monitor changes to Information Risk Questionnaire ratings, and identify or resolve ProcessUnity issues that may affect assessment activities.

Required Qualifications:

• University degree or equivalent combination of education and relevant business experience.
• Three to five years of business analysis, vendor management, third-party risk management, information security risk, or related risk experience.
• Strong organizational, analytical, problem-solving, and record-management skills, with demonstrated attention to detail.
• Ability to manage multiple priorities, coordinate activities across stakeholders, and work effectively both independently and as part of a team.
• Clear written and verbal communication skills, along with proficiency in Microsoft Office applications; experience with Archer, ProcessUnity, ServiceNow, or similar governance, risk, and compliance platforms is an asset.

When you join our team:

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

The role being advertised is an existing vacancy.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].

Referenced Salary Location

Base salary range is expected to be between

Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual base salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact [email protected] for the salary range for your location.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact [email protected] for more information about U.S.-specific paid time off provisions.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.