Information Security Consultant (Toronto)

Position Overview

Manulife is hiring an Information Security Consultant to lead Risk Control Self Assessments (RCSA) and Risk Governance across technology, data, and information/operational risk. Reporting to the Director, IRM, this first‑line role oversees risk execution and control operations aligned with Manulife’s risk appetite, standards, and regulatory expectations. The consultant will act as a trusted advisor to functional risk teams, centers of excellence, and senior technology/data leaders, driving effective control design, monitoring, issue remediation, and clear risk reporting to enable informed decisions and strong governance.

Position Responsibilities

• Perform internal control testing for RCSA, Informational, and Operational Risk and Resilience Oversight, regulatory, and audit activities
• Design and implement new controls; test design and operating effectiveness
• Coordinate research and responses for completeness, data ana...