Manager/Sr.manager, Technology Assurance Program - Methodology And Standardization

Are you looking for a supportive, collaborative workplace with great teams and inspiring leaders? You’ve come to the right place. We’re looking for ambitious people who share our values and want to make every day better for people around the world. If this sounds like you, and the career below sounds exciting, we’d like to hear from you.
Working Arrangement
Hybrid

The Manager/Sr. Manager, Technology Assurance Program - Methodology and Standardization is a broadly scoped and highly leveraged role, requiring leadership, strategic mindset, risk assurance and control testing deep expertise combined with strong collaboration, organization, and execution skills.
The 2nd line Global Information Risk Management (GIRM) group has stood up an Assurance program to ensure comprehensive, consistent, and rigorous challenge function. This Assurance Program will be designed to continue maturing our Manulife 2nd line capabilities so that the critical operating and other issues are identified and remediated on a timely basis and meet OSFI and the related regulatory expectations.
This Assurance Program will standardize the GIRM assurance processes, centralize the related capabilities and resources/People and drive an expansion of the GIRM assurance coverage.
The incumbent will support the Assurance Program and the design of this COE’s target operating model. This role will focus on the assurance processes standardization and the assurance overage expansion strategy and roadmap.
The Manager, GIRM Assurance Program will report to the Director, IRM Methodology and standardization within the 2nd Line of Defence risk organization.
Key Responsibilities
Assurance Methodology

• Stay abreast with evolving information and technology risks, new regulations, laws and requirements for information risk, information security, cybersecurity, information protection and privacy across jurisdictions and overseeing company compliance with as required.
• Develop and maintain the Assurance methodology document.
• Design and maintain Control Testing sampling methodology.
• Design and maintain the COE Control testing approach and monitoring process.
• Design and maintain Assurance COE processes, templates, and tools.
• Design the COE interaction model and its related processes.
• Work with Audit Services in aligning assessment methodology and approach and agree on reliance model.

Standardization Program

• Identify the COE assurance coverage and related capabilities scope.
• Develop and maintain Control test procedures and steps for all Information Risk standards.
• Work with 1st line of defense and all technology business units to identify and understand the technology processes, tools and capabilities implemented to support the IRM controls.
• Maintain the procedures and steps for controls implementation.
• Support the COE Target operating model design and rollout.
• Identify the IT Assets, Inventory and source systems that support controls.
• Work with information risk teams globally to ensure compliance with Global Information Risk Management processes, procedures, policies, standards, templates, and guidelines.

Controls Inventory Management

• Develop and maintain technology control inventory related to Information security standards.
• Maintain and foster enduring relationships with internal stakeholders and peers.
• Standardize the technology control inventory across the Enterprise.
• Participate in global initiatives to work with Line 1 and Line 2 in identifying, maintaining, and updating technology controls.
• Work with the management to ensure their informed consent and understanding of risk treatments and acceptances.
• Maintain the controls update program in line with standards refresh program and keep the inventory up to date in the GRC tool.
• Socialize and seek stakeholder feedback on control descriptions and their efficacy.

Job Requirements

• Minimum 5 years of progressive leadership in the areas of Assurance and Control testing, Information Security, Business Resiliency, and Technology Risk.
• Strong communication skills and ability to explain highly technical information for non-technologists including executives.
• Previous risk advisory consulting experience is preferred.
• Previous audit or 2nd line oversight and assurance experience.
• Sound knowledge of best practices of various aspects of information risk management and prior experience as a leader in Information Risk.
• Proven experience in Process improvement and design.
• Knowledge of the regulatory environments in the U.S. and Canada
• Strong competencies in collaboration, problem solving and influencing key risk decisions
• Strong understanding of related best practices and relevant industry framework.
• Recognized professional designations in Information Security, Audit and Business Continuity (e.g. CISSP, CISA, CRISC, FAIR, MBCP)
• University degree (Computer Science or related discipline preferred)

Competencies

• Strong communication, consulting, and influencing skills
• Strong stakeholder management and alignment skills
• Strong presentation and facilitation skills to all levels and audiences
• Problem solving, analytical, innovative, and strategic thinker
• Strong time management and organizational skills to manage multiple tasks and changing priorities
• Ability to develop and maintain strong relationships
• Strong team player (collaborative)

Every career at Manulife/John Hancock provides the opportunity to learn new skills and move your career forward. Ready to make an impact somewhere? What are you waiting for? Apply today.
About John Hancock And Manulife
John Hancock is a unit of Manulife Financial Corporation, a leading international financial services group that helps people make their decisions easier and lives better. We operate primarily as John Hancock in the United States, and Manulife globally, including Canada, Asia and Europe. We provide financial advice, insurance and wealth and asset management solutions for individuals, groups and institutions. Assets under management and administration by Manulife and its subsidiaries were CAD$1.3 trillion (US$1.1 trillion) as of June 30, 2021. Manulife Financial Corporation trades as MFC on the TSX, NYSE, and PSE, and under 945 on the SEHK. Manulife can be found at manulife.com.
One of the largest life insurers in the United States, John Hancock supports more than 10 million Americans with a broad range of financial products, including life insurance, annuities, investments, 401(k) plans, and education savings plans. Additional information about John Hancock may be found at johnhancock.com.
Manulife is an Equal Opportunity Employer
At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.
It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].
Salary & Benefits
The annual base salary for this role is listed below.
Primary Location
Toronto, Ontario
Salary range is expected to be between
$89,950.00 CAD - $167,050.00 CAD
If you are applying for this role outside of the primary location, please contact [email protected] for the salary range for your location. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.
Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact [email protected] for more information about U.S.-specific paid time off provisions.