Japanese Bilingual Vendor Information Security Senior Analyst

Vendor Information Security Senior Analyst (Level 6)

(Japanese Language Required JLPT N1)

We are seeking a highly skilled Vendor Information Security Senior Analyst (Level 6) to join the Vendor Information Security Management (VISM) / IT Governance team. This role supports the delivery of Vendor Risk Management Center of Excellence (COE) services and focuses on managing third-party/vendor information security risks across regions including Japan.

The role requires strong stakeholder management risk assessment expertise and the ability to work across global teams while supporting regulatory audit and business requirements. The successful candidate will also play a key role in ensuring vendor risk processes align with enterprise security standards and industry best practices.

Position Responsibilities:

Vendor Risk Assessment & Governance

• Perform end-to-end third-party/vendor information security risk assessments for new and existing vendors across assigned regions (including Japan).
• Handle complex vendor risk assessments across multiple business segments.
• Review and evaluate:
  • Independent audit reports
  • Penetration testing reports
  • Vulnerability management reports
• Conduct virtual vendor assessments when required.
• Responsible for the Japan and other assigned country Vendor Information risk assessments of new and existing vendors/Third Parties
• Working closely with Category Managers in Procurement BU contacts and contract owners BU security officers and business continuity privacy analysts.
• Perform on virtual site visits of vendors if required.
• Perform contract reviews and working with Legal team as appropriate
• Document issues arising from risk assessments and log the issues in various tools.
• Perform any other tasks as assigned related to Vendor Information Security Management (VISM)

Stakeholder Collaboration

• Work closely with:
  • Procurement and Category Managers
  • Business Unit stakeholders and contract owners
  • Security privacy and business continuity teams
• Provide updates in weekly reports governance forums and stakeholder meetings.

Risk Management & Reporting

• Identify document and track security risks and control gaps in vendor engagements.
• Maintain accurate risk records in Vendor Risk Management tools (e.g. Archer ProcessUnity).
• Support remediation tracking and communicate risk posture to stakeholders.

Audit & Compliance Support

• Support internal and external audits (Audit Services regulators clients third-party auditors).
• Conduct contract security reviews in partnership with Legal and Compliance teams.
• Ensure alignment with information security frameworks (ISO 27001 NIST PCI DSS etc.).

Continuous Improvement & Thought Leadership

• Stay current on:
  • Emerging cybersecurity risks
  • Industry trends and technologies
  • Regulatory developments
• Contribute to the enhancement of vendor risk methodologies policies and procedures.
• Support broader initiatives in information security IT governance and business continuity.

Required Qualifications:

• 5 years of experience in:
  • Information Security
  • IT Risk / Governance / Compliance
  • Technology Audit / Cybersecurity
  • Third-Party Risk Management

Education & Experience

• Bachelors degree in Computer Science Information Security Business Finance or related field.
• 5 years of experience in:
  • Information Security
  • IT Risk / Governance / Compliance
  • Technology Audit / Cybersecurity
  • Third-Party Risk Management
• Experience within financial services or insurance industry is a strong advantage.

Certifications (Preferred)

• CISA CRISC CISSP or equivalent certifications.

Technical & Functional Skills

• Strong knowledge of:
  • Vendor Risk Management practices
  • IT risk and control frameworks (ISO 27001 NIST etc.)
• Experience in:
  • Risk assessment methodologies
  • Security controls evaluation
  • Vendor risk tools (e.g. Archer ProcessUnity)

Language Requirement

• Japanese Language Proficiency: JLPT N1 (Required)
  • Excellent written and verbal communication skills in Japanese
  • Ability to engage with Japan-based stakeholders and vendors effectively

Preferred Qualifications:

• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management
• Ability to manage multiple priorities in a global matrixed environment
• High attention to detail and risk awareness
• Adaptability to evolving security and regulatory landscapes

Work Setup

• Flexible work arrangement (onsite and remote as required)
• Willingness to align with regional/global schedules

When you join our team:

Well empower you to learn and grow the career you want.

Well recognize and support you in a flexible environment where well-being and inclusion are more than just words.

As part of our global team well support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider helping people make their decisions easier and lives better. To learn more about us visit is an Equal Opportunity Employer

At Manulife/John Hancock we embrace our diversity. We strive to attract develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment retention advancement and compensation and we administer all of our practices and programs without discrimination on the basis of race ancestry place of origin colour ethnic origin citizenship religion or religious beliefs creed sex (including pregnancy and pregnancy-related conditions) sexual orientation genetic characteristics veteran status gender identity gender expression age marital status family status disability or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process contact .