Information Risk Management Analyst

The Senior Information Risk Management (IRM) Analyst will support GWAM Risk Cybersecurity Operations by performing information risk assessments executing established risk management workflows and supporting key operational activities such as issue and corrective action plan management Key Risk Indicator (KRI) reporting and control monitoring. This role will also help drive process efficiency and continuous improvement through documentation data analysis automation and collaboration with stakeholders across the organization.

Position Responsibilities:

• Execute documented process workflows to perform General Information Risk Management (IRM) services.

• Document processes and workflows and maintain/update the existing process documents.

• Contribute to driving efficiencies and identifying enhancement opportunities across existing processes and techniques through data analytics automation and other process improvement ideas.

• Perform activities assigned to GWAM Risk Cybersecurity Operations.

• Perform information risk assessments in compliance with the global Information Risk Assessment methodology policies and standards.

• Perform Key Risk Indicator (KRI) management activities.

• Perform control monitoring and conduct risk assessments including but not limited to firewall Zscaler exemptions VDI Azure portal access software removable media access and network security group requests.

• Ensure monthly reports and ad hoc requests are responded to and delivered in accordance with SLAs

• Drive projects for improving process efficiency and automation. Contribute to and collaborate on the development and improvement of tools.

• Research collect and analyze qualitative data required for risk assessments.

• Track and manage identified information risk issues and associated corrective action plans (CAPs) ensuring timely resolution and closure in alignment with governance requirements.

• Actively contributes to knowledge-sharing exercises.

• Work independently on assigned tasks while providing regular progress updates.

• Candidate must be flexible to work in the morning or rotating shifts in a hybrid environment as required in our Quezon City Office.

Required Qualifications:

• At least one year of experience in a corporate environment.

• Strong knowledge of security controls frameworks regulatory requirements standards and concepts (e.g. ISO 27001/27002 MAS) as well as industry best practices (e.g. OWASP CSA CIS).

• Bachelors degree in Computer Science Information Technology or equivalent.

• Post-secondary education in information security computer science information technology software engineering or equivalent professional education.

• Must meet current job expectations and performance metrics for internal applicants.

• Exceptional attention to detail ensuring accuracy and completeness in risk documentation and issue tracking.

• Strong interpersonal and collaboration skills with the ability to effectively engage with diverse teams and stakeholders.

• Strong problem-solving and analytical skills with an innovative mindset.

• A team player who can also work independently.

When you join our team:

Well empower you to learn and grow the career you want.

Well recognize and support you in a flexible environment where well-being and inclusion are more than just words.

As part of our global team well support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider helping people make their decisions easier and lives better. To learn more about us visit is an Equal Opportunity Employer

At Manulife/John Hancock we embrace our diversity. We strive to attract develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment retention advancement and compensation and we administer all of our practices and programs without discrimination on the basis of race ancestry place of origin colour ethnic origin citizenship religion or religious beliefs creed sex (including pregnancy and pregnancy-related conditions) sexual orientation genetic characteristics veteran status gender identity gender expression age marital status family status disability or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process contact .