Manager/ Senior Manager, Information Risk Management

The position requires good understanding of technology and information security risks and controls, disaster recovery, and solid communication, presentation and influencing skills. This position will operate across multiple markets and their businesses, functions, and geographies, to promote and enhance awareness of risks and controls.

Key Responsibilities:

1. IRM Oversight & Risk Review

Provide second-line Information Risk Management (IRM) oversight of first-line defense activities related to change management, third-party risk, incident response, business continuity, and disaster recovery, ensuring alignment with the internal IRM framework.

Review and challenge issues, risk and exceptions in accordance with IRM standards.

2. Market Advisory & Risk Insights

Deliver market-specific risk insights and advisory support to stakeholders.

Guide market teams on global IRM initiatives and ensure local alignment.

Monitor the risk remediation plans within the market.

Facilitate evaluation of market risk posture through structured reporting.

3. Governance & Stakeholder Engagement

Prepare for and follow up on market Information Risk Council meetings, ensuring timely and accurate inputs.

Build and maintain strong relationships with Market IT, Risk, Compliance, and other key stakeholders.

4. Tools & Administration

Utilize internal risk tools effectively to support oversight and reporting activities.

Perform ad hoc tasks and administrative duties as required.

Knowledge/Skills/Competencies/Education:

Holds a bachelor’s degree in Information Technology (IT) or related fields

Minimum 1 - 3 years of relevant experience in information risk management or information security management.

Sound technology background with risk management sense.

Broad knowledge of financial services/insurance business and related products.

Solid written and oral communication and presentation skills.

Detail-oriented with good analytical, critical thinking and problem-solving skills with the ability to think strategically.

Solid influencing skills with the ability to build effective relationships, both within and across divisions.

Professional designation, e.g. CISSP, CRISC, CISA, CSSLP, or CISM would be an advantage.

High proficiency in data analytics tools such as PowerBI is a PLUS.

宏利金融有限公司是全球领先的金融服务提供商，致力于帮助大众轻松作出明智抉择，实现精彩人生。如欲了解更多关于我们的信息，请访问人寿保险-养老保险-健康保险-中宏保险官网 (manulife-sinochem.com).

宏利是平等機會僱主

在宏利／恒康，我們擁抱多元。我們致力於吸引、培養及挽留和所服務客戶同樣多元的員工，並從而營造包容的工作環境，接納文化和個體差異。我們矢志維持公平的招聘、挽留、晉升及薪酬制度，我們管理的所有實踐及項目不會因種族、血統、原籍地、膚色、族裔、國籍、宗教或宗教信仰、信仰、性別（包括懷孕及其相關情況）、性取向、遺傳特徵、退伍軍人身份、性別認同、性別表達、年齡、婚姻狀況、家庭狀況、殘疾或受適用法律保護的任何其他因素而區別對待。

我們的首要任務是消除障礙，為員工提供平等就業機會。人力資源部代表將盡力為應徵過程中提出要求的申請人提供合理協助。申請人要求提供協助所分享的信息將會按照適用法律及宏利／恒康政策儲存及使用。應徵過程中如需協助，請聯絡 hr@manulife.com。

Working Arrangement

混合办公