Director, Business Unit Security Officer

Join Manulife as a Director, Business Unit Security Officer within our First Line of Defense. Collaborating with the Head of Information Security and Risk Management, you will lead risk-based security assessments for new technologies and IT solutions across Canadian Technology Business Units. You will safeguard our cloud and on-premises environments by identifying threats, recommending controls, ensuring compliance, and driving remediation. This role offers exposure to groundbreaking security practices and the opportunity to foster a culture of security awareness across the Canadian segment.

Position Responsibilities:

Conduct formal risk assessments for technology systems and infrastructure (e.g., NIST RMF).

Identify compliance gaps, enforce security policies/standards, and drive timely remediation.

Integrate security into workflows by partnering with technology teams (Agile/DevOps) and platform teams.

Partner on RCSA initiatives to align with corporate and regulatory requirements.

Manage audits, regulatory reviews, and second line of defense queries; provide evidence and mitigation plans.

Define, track, and report remediation programs and corrective actions to meet regulatory requirements and global standards.

Review, update, and socialize security policies, patterns, and guardrails across the organization.

Offer consulting expertise to Business Unit Technology leaders to align with global security objectives.

Represent the Canadian division in global security planning and standards.

Maintain awareness of projects/initiatives impacting security posture and proactively influence design.

Build strategic partnerships with counterparts in technology, business and global cybersecurity team; raise awareness of emerging cyber threats specific to their operations.

Build deep knowledge of the Canadian segment and BUs’ or equivalent experience business processes and products to tailor risk mentorship.

Report important metrics, control effectiveness, and risk posture; maintain customer dashboards and briefings.

Continuously refine processes based on industry trends, threat intelligence, and audit findings.

Delegate, lead, and mentor teams with the autonomy needed to facilitate decision-making.

Required Qualifications:

10+ years in information security and risk management, including 5+ years in leadership roles.

Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).

Professional certifications: CISSP, CISM, CRISC (or equivalent).

Deep understanding of security and risk management frameworks (ISO 27001, NIST, COBIT) and relevant regulations (e.g., GDPR, SOX).

Preferred Qualifications:

Deep technical knowledge and hands‑on experience in:

Cloud and network security

Cryptography and key management

Identity and Access Management (IAM)

Application security (SDLC, SAST/DAST, threat modeling)

Experience working in Agile/DevOps environments and integrating security into CI/CD.

Superb communication, consulting, and influencing skills; ability to tailor messages to technical and executive audiences.

Strategic problem solver with analytical and innovative capabilities; proactive approach to issue remediation.

Skilled in customer management, alignment, and cross‑functional collaboration.

Ability to foster a culture of security awareness across the Canadian segment.

Good interpersonal skills for engaging diverse communities and executive customers.

When you join our team:

We’ll empower you to learn and grow the career you want.

We’ll recognize and support you in a flexible environment where well‑being and inclusion are more than just words.

As part of our distributed team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy‑related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact hr@manulife.com.

Referenced Salary Location Toronto, Ontario

Working Arrangement Hybrid

Salary range is expected to be between $113,260.00 CAD - $210,340.00 CAD

Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job‑related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact hr@manulife.com for the salary range for your location.

Benefits Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short‑ and long‑term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact hr@manulife.com for more information about U.S.-specific paid time off provisions.

#J-18808-Ljbffr