Information Security Manager

Manulife Quezon City, National Capital Region, Philippines

Join to apply for the Information Security Manager role at Manulife

The Information Security Manager evaluates technology environments through control testing, compliance assessments, identifies key gaps and recommends actions for remediation. Partners with other teams for cybersecurity controls assessment and tests effectiveness of cybersecurity controls ensuring that systems and processes meet industry standards and regulatory requirements.

Position Responsibilities

• Plans, conducts and manages cybersecurity and technology controls testing, compliance assessments including IT systems and processes for design and operating effectiveness.
• Develops and maintains test procedures and plans for IT Security Controls, ensuring alignment with key objectives, industry standards and regulatory requirements.
• Evaluates the organization’s compliance with preferred cybersecurity frameworks.
• Performs control testing, security assessments, and risk analysis on systems, applications, and network infrastructure to identify potential weaknesses and security gaps.
• Analyzes test results, identifies security control deficiencies, and recommends solutions to resolve identified issues.
• Partners with operations and IT teams to ensure that all IT security controls are adequately tested and implemented.
• Tracks security issues / risks, prepares comprehensive reports outlining findings, recommendations and actionable insights to senior management and stakeholders.
• Collaborates with cross-functional teams including IT, legal, compliance and liaises with law enforcement and other external entities to address findings and implement corrective action.
• Develops innovative approaches and solutions, including use of data analytics, Agile methodology, and automation to improve overall effectiveness and value of the controls testing team.
• Ensures compliance with applicable security policies and standards.
• Stays updated on latest cybersecurity threats, vulnerabilities, and testing techniques, contributing to the enhancement of cybersecurity practices within the organization.
• Provides professional advice – takes a lead role of process or program execution.
• Is accountable for own work and contributes to setting standards through expertise in own job discipline that impact others’ deliverables.
• Work is guided by cascaded policies or business plans.
• May lead medium to large size projects or work streams with moderate resource requirements, risk and / or complexity with multiple teams representing different interests.

Required Qualifications

Skills

When you join our team

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Insurance and Technology, Information and Media

#J-18808-Ljbffr