Manulife is a leading international financial services provider, helping people make decisions easier and lives better. We are seeking an experienced Senior Application Security Specialist to join our team. The candidate will play a critical role in establishing and maintaining our security and risk governance frameworks, monitoring threats, assessing vulnerabilities, and ensuring compliance with organizational standards and regulatory requirements. Responsibilities Perform code scanning, validation, tuning, and optimization using SAST, DAST, and SCA tools such as Snyk, Burp Suite, SonarQube, Veracode, and Checkmarx to produce actionable remediation results. Conduct penetration testing, code scanning, secrets management (GitGuardian), and threat modeling for business applications to determine risk ratings and prioritize vulnerabilities discovered in alignment with remediation timelines. Execute intake, triage, analysis, and reporting procedures for security assessments. Work with code repositories such as GitHub and CI/CD pipelines in Azure DevOps. Coordinate assessment and risk analysis activities, evaluate governance processes, and recommend improvement opportunities. Support establishment, development, and maintenance of risk governance frameworks, risk assessment methodologies, metrics reporting, and compliance protocols. Conduct vulnerability assessments and prioritize remediation activities in collaboration with stakeholders. Document findings and collaborate with cross‑functional teams to implement corrective actions. Work closely with senior security engineers, product partners, architects, and cross‑functional teams in Agile/DevOps environments.



Communicate risk and compliance assessments and recommendations to business units and senior management. Lead and participate in meetings to review outstanding vulnerabilities and clarify business and technical impacts. Develop and report actionable KPIs and KRIs aligned with application security policies and standards. Analyze cyber defense policies for compliance with regulations and organizational standards. Lead meetings to analyze risk indicators and develop executive‑level dashboards. Maintain documentation of governance processes and contribute to policy updates. Stay updated on evolving cybersecurity threats and contribute to enhancing risk reporting processes. Provide professional advice and take a leadership role in process or program execution. Be accountable for own work and contribute to setting standards through expertise that impacts other deliverables. Qualifications Strong understanding of information security controls, vulnerability management, and risk management frameworks such as NIST CSF and ISO 27001/27002. Experience working with cloud technologies including Azure, AWS, and Alibaba Cloud. Knowledge of cybersecurity principles, internal controls, and risk management tools. Proficiency in data visualization tools (Tableau, Power BI)



and statistical data analysis. Hands‑on experience with JIRA, Confluence, and Microsoft 365. Experience with cybersecurity assessment frameworks including PTES, OWASP, and OSSTM. Understanding of legal and regulatory requirements related to cybersecurity, IT governance, and technology risk management. Excellent communication skills to convey risk assessments and security recommendations. Knowledge of ticketing and tracking tools such as ServiceNow. Familiarity with cybersecurity governance frameworks and their implementation. Proficiency in using risk assessment tools and software. Preferred Qualifications Industry‑recognized security certifications such as CISSP, CSSLP, OSCP, or GWAPT. Perks Competitive salary ranging from $113,000 to $163,000 CAD, plus incentive compensation. Health, dental, vision, short‑term and long‑term disability, and life insurance coverage. Wellness program and employee/family assistance plan. Retirement savings plan with employer matching and a global share ownership plan. Paid time off including holidays, vacation, personal, and sick days; statutory leaves of absence. Manulife is an Equal Opportunity Employer. We embrace diversity and provide accommodations for applicants with disabilities. All applicants are considered without regard to race, ancestry, place of origin, color, ethnic origin, citizenship, religion, creed, sex, gender identity, sexual orientation, genetic characteristics, veteran status, age, marital status, family status, disability, or any other protected class. #J-18808-Ljbffr

📌 Senior Application Security Specialist (Toronto) - C$113,000 - C$163,000 A Year
🏢 Manulife
📍 Toronto