Cybersecurity Manager

About the role

Manulife Financial Corporation is looking for a Cybersecurity Manager to join its Asia CISO organization, reporting directly to the Asia Regional Office Security Officer and serving within the BUSO Center of Excellence (BUSO CoE). The BUSO CoE supports Market Business Unit Security Officers with cybersecurity and technology control activities, partnering with regional leaders and in-country BUSOs on control execution, process improvements and project-driven initiatives.

Key responsibilities

• Lead end-to-end project information risk assessments across Asia markets, from scoping and criticality assessment through risk identification, control evaluation, treatment, remediation tracking and business risk acceptance.
• Review assessments by market assessors to ensure consistent application of risk methodologies, controls, documentation and quality standards.
• Analyze project designs, architectures, data flows, third-party arrangements and security requirements, then turn findings into risk statements and recommendations for stakeholders.
• Monitor risk-treatment plans, commitments, exceptions and acceptances, maintain assessment schedules and records, and escalate material or unresolved risks.
• Develop and maintain the regional risk assessment framework, including playbooks, templates, procedures, training materials, QA plans and reporting standards.
• Provide application and information security consultation to project teams, technology partners and business stakeholders, and support the end-to-end handling of security incidents, especially Data Loss Prevention incidents.
• Partner with market BUSOs to identify security and risk activities suitable for centralization, standardization or automation, and establish governance for CoE services.
• Deliver regular status, risk and performance updates to market BUSOs and regional stakeholders, and conduct knowledge transfer and coaching.

Required profile

• University/college graduate with 3-5 years of progressive cybersecurity experience, including 3+ years as an Information Security Officer.
• Background in information security risk assessment (project and BAU), incident response, access review, data loss prevention, vulnerability and patch management, and business continuity and disaster recovery.
• Knowledge of Manulife's Information Risk Management Framework and the CIA triad; strong understanding of financial services and insurance environments.
• Preferred: experience in financial services or insurance, regional or multi-market security programs, and working knowledge of ISO/IEC 27001, NIST CSF, COBIT.

Required skills

• Certifications: CISSP and CISM preferred; GCIH or incident response certifications advantageous.
• Expertise in JIRA, ServiceNow, Devo, PowerBI, Confluence and Archer.
• Preferred: experience standardizing, centralizing or automating security processes, and facilitating security assessments and remediation coordination.

The role is based at UP Ayala Technohub (Quezon City) in a hybrid setup (3 days onsite per week) on a day-shift schedule.