Manager, Technology Risk Governance, Compliance & Reporting

The Manager, Technology Risk Governance, Compliance & Reporting will support Enterprise Technology Services by managing technology and cyber risk metrics across governance, compliance, monitoring, validation, and reporting activities. This role contributes to Manulife’s mission by helping ensure technology and cybersecurity risks are accurately measured, reported, and managed in alignment with enterprise risk appetite, regulatory expectations, and governance standards. The successful candidate will partner with Technology, Cybersecurity, Risk, Audit, and Compliance stakeholders to strengthen reporting integrity, support audit readiness, and drive consistent risk governance practices. This is an opportunity to influence executive and Board-level reporting while helping mature technology and cyber risk oversight across ETS.

Position Responsibilities:

• Manage the lifecycle of technology and cyber risk metrics, including maintenance, monitoring, reporting, validation, and annual reviews.

• Govern compliance to technology and cybersecurity metrics, ensuring alignment to risk appetite, governance standards, and enterprise requirements.

• Monitor metric performance and compliance trends, identify emerging risks, and coordinate remediation activities for metric breaches.

• Maintain Tier 1 metrics and supporting data within enterprise governance, risk, and control systems.

• Partner with Technology, Cybersecurity, and Risk stakeholders to ensure metric accuracy, data quality, and reporting integrity.

• Support audit, regulatory, and governance reviews through documentation, evidence, and traceable reporting.

• Drive consistency in metrics governance, compliance monitoring, and risk reporting processes across ETS.

• Prepare executive and Board-level reporting on technology and cyber risk performance, breaches, trends, and remediation activities.

Required Qualifications:

• 7–10 years of experience in technology risk, cyber risk, operational risk, governance, compliance, or enterprise risk management.

• Experience managing metrics, reporting, risk, compliance, or control-based programs in a structured governance environment.

• Strong understanding of technology and cyber risk management, control effectiveness, risk metrics, and enterprise risk management principles.

• Knowledge of cybersecurity concepts, including threats, vulnerabilities, security controls, risk assessments, incident management, and regulatory expectations.

• Demonstrated ability to manage end-to-end metrics governance, reporting, validation, and compliance processes in an audit-ready environment.

• Strong analytical and problem-solving skills with a focus on data quality, accuracy, completeness, and risk-based decision-making.

• Experience working with governance, risk and control platforms, cybersecurity reporting tools, or enterprise reporting solutions.

• Strong stakeholder management and communication skills, with the ability to influence and collaborate across Technology, Cybersecurity, Risk, Audit, and Compliance functions.

Preferred Qualifications:

• Experience preparing executive, committee, or Board-level technology and cyber risk reporting.

• Experience working in financial services, insurance, banking, or another highly regulated environment.

• Knowledge of technology risk, cyber risk, control, or governance frameworks.

• Experience supporting audit, regulatory, compliance, or enterprise risk reviews.

• Professional certification such as CISA, CISM, CRISC, CISSP, CGRC, or equivalent is considered an asset.

When you join our team:

• We’ll empower you to learn and grow the career you want.

• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

• As part of our global team, we’ll support you in shaping the future you want to see.