Position Responsibilities:

- Delivering information risk expertise and advice to the business users enabling them to manage their Resilience & Crisis response risks efficiently and effectively.
- Managing the Resilience & Crisis risk team and function with direct reports in multiple locations with responsibility for all staffing decisions related to this team.
- Adjusting and setting risk commitments within the team.
- In a changing environment, constantly reviewing and balancing the team’s business-as-usual commitments with short-term/immediate priorities and long-term strategic initiatives.
- Completing short-term planning and creating long-term strategy that will mature information risk capabilities ensuring the practices keep pace with both internal drivers (company strategy and goals) and external drivers (technology, regulations, threats, vulnerabilities, etc.).
- Fostering and maintaining a talent pipeline to ensure staff openings and hiring are managed proactively; devising training paths and development plans to ensure skills within the team are fostered and strengthened to meet both the current and anticipated demand; maintaining and if appropriate attaining current certifications.
- Anticipating the needs of skills, knowledge, and tools for their team.
- Being responsible and accountable for team budget and spending.
- Staying abreast of new regulations, laws, and requirements for relevant risks across jurisdictions and overseeing compliance with same as required.
- Ensuring staff are properly trained and keep current with information risk and resilience developments, and technology (both in use at Manulife and across the industry).




- Interacting with and cooperating with information risk teams globally ensuring uniform processes and compliance with Global Information Risk Management processes, procedures, policies, standards, templates, and guidelines.
- Maintaining and fostering enduring relationships with internal customers namely: Executives and other staff within business lines project managers, developers, and others.
- Executives and peers within the wider Information Risk Management community executives and others within other second- and third-line of defense teams (Audit Services, Operational Risk, Compliance, Investigative Services, Enterprise Risk, etc.)
- Leading the Global ORM function and supporting the Head of Technology, Operational and AI Risk in overseeing operational risk across the Company.
- Leading the implementation of the Company's enterprise-level ORM program and ensuring the program adds value to the organization and is aligned with regulatory expectations and industry practices.
- Responsible for driving operational risk transformation towards an effective and efficient integrated model with overall operations.
- Reimagine and lead with a strategic lens.
- Drive and implement strategic and global operational initiatives to support business goals.
- Lead talent transformation to attract and retain highly skilled individuals.
- Ensuring core program elements are appropriately designed and implemented including the following:



Company's ORM Framework document and Operational Risk Policy and Standards.
- Risk Appetite for Operational Risk.
- Risk and Control Assessment program.
- Operational incident data collection database and related processes.
- ORM scenario and stress testing program.
- Evaluating operational risk on significant projects/programs, new/revised products, and M&A; transactions.
- Key risk indicator tracking; Operational risk reporting including quarterly dashboard.
- Leading the development and implementation of ORM supporting technology (i.e. Archer).
- Responsible for communication and reporting requirements related to the ORM Program including the following: Supporting the Operational Risk Committee to facilitate its effective operation and oversight of enterprise level operational risk.
- Acting as the key point of contact for discussions with Manulife's primary regulator (OSFI)and other regulators as appropriate.
- Act as an ambassador for the ORM program across the Company.
- Ensuring appropriate communication of the program's benefit and requirements to generate the required organizational support.
- Collaborating with other global functional groups to ensure other specific operational risk programs are integrated into the ORM program.
- Keeping abreast of industry developments, best practices and trends in ORM.
- This includes monitoring international developments as they pertain to operational risk and future requirements that may be established by OSFI, or other regulators.
- Need to collaborate extensively with other Global functions and segments to enhance and implement the ORM program.
- Effectively communicate requirements and

📌 VP, Operational Risk Oversight (Toronto)
🏢 Manulife/John Hancock
📍 Toronto