Senior Manager, Information Risk Management

We are seeking an experienced and highly skilled Senior Security Consultant to join our organization. The ideal candidate will have a robust background in cybersecurity, with extensive experience in designing and implementing security solutions, conducting risk assessments, and advising on best practices to enhance organizational security posture. This role is crucial for ensuring Manulife Singapore's compliance with regulatory requirements and strengthening our cybersecurity defence. With a focus on Information Risk Management (IRM), the successful candidate will lead the development and execution of IRM strategies, policies, and frameworks. **Responsibilities:** * Lead the development and implementation of the Information Risk Management framework, policies, and standards aligned with industry best practices and regulatory requirements. * Conduct comprehensive risk assessments, including the identification, analysis, and evaluation of information security risks and vulnerabilities. * Develop and maintain a risk register, tracking and monitoring identified risks, and ensuring timely mitigation and remediation efforts. * Provide expert advice and guidance to stakeholders on information security matters, including risk management, security controls, and incident response. * Collaborate with various business units and IT teams to integrate information security requirements into projects and initiatives. * Monitor and analyze security threats and vulnerabilities, and recommend appropriate security controls and countermeasures. * Oversee the implementation and maintenance of security controls, ensuring their effectiveness and compliance. * Participate in security incident response activities, including investigation, analysis, and remediation. * Stay abreast of emerging security threats, vulnerabilities, and technologies, and provide recommendations for proactive security measures. * Prepare and deliver reports, presentations, and training materials on information security topics. * Manage and mentor a team of information security professionals, providing guidance and support. **Qualifications:** * Bachelor's degree in Computer Science, Information Security, or a related field. * Minimum 8 years of experience in information security, with a focus on risk management. * Strong understanding of information security principles, frameworks, and best practices (e.g., ISO 27001, NIST, COBIT). * Experience in conducting risk assessments, vulnerability assessments, and penetration testing. * In-depth knowledge of security technologies, including firewalls, intrusion detection/prevention systems, SIEM, and endpoint security. * Experience with cloud security, including AWS, Azure, or GCP. * Strong knowledge of security regulations and compliance requirements, such as PDPA, MAS, and GDPR. * Excellent communication, interpersonal, and leadership skills. * Ability to work independently and collaboratively in a fast-paced environment. * Relevant certifications such as CISSP, CISM, CRISC, or equivalent are highly preferred. **Benefits:** * Competitive salary * Comprehensive health insurance * Retirement plan * Paid time off * Professional development opportunities