> Markdown version of [/jobs/ext/506885-information-security-consultant](https://www.wearedevelopers.com/jobs/ext/506885-information-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Consultant - **Company:** Manulife - **Location:** Chicago, IL, United States - **Experience:** Experienced - **Salary:** $86,100.0 - $136,100.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Generative AI, Data Analytics, RSA Archer Platform, Virtual Agents, Servicenow - **Published:** June 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b625d54a473726c7 ## About the Role Do you have experience in Risk management compliance audits?, * 3-5 years of experience in Information Risk, Technology Risk, Cyber Risk, GRC, or Operational Risk. * Experience performing independent L1B oversight or audit-style review activities. * Strong understanding of technology, data, cloud, infrastructure, and operational resilience risks. * Ability to evaluate complex risk scenarios. * Experience with risk programs (RCSA, third-party risk, issues, incidents, BC/DR, change risk). * Familiarity with GRC platforms such as Archer, ServiceNow, or Fusion. * Knowledge of regulatory frameworks and standards (ISO, NIST, COBIT, CSA/CCM, OSFI, etc.). * Exposure to Generative AI, Agentic AI, automation tools, or continuous monitoring technologies. ## Description Manulife is hiring an Information Security Consultant to lead Risk Control Self Assessments (RCSA) and Risk Governance across technology, data, and information/operational risk. Reporting to the Director, IRM, this first-line role oversees risk execution and control operations aligned to Manulife's risk appetite, standards, and regulatory expectations. You will act as a trusted advisor to functional risk teams, centers of excellence, and senior technology/data leaders-driving effective control design, monitoring, issue remediation, and clear risk reporting to enable informed decisions and strong governance., * Perform internal control testing for RCSA, Informational, and Operational Risk and Resilience Oversight, regulatory, and audit activities * Design and implement new controls; test design and operating effectiveness * Coordinate research and responses for completeness, data analytics, compliance monitoring, internal reviews, regulatory requirements, and external audits * Analyze processes and controls using data analytics to identify gaps, trends, and remediation needs * Recommend system enhancements and operational improvements to increase efficiency and strengthen risk governance * Troubleshoot and resolve complex operational and control-related issues * Drive continuous improvement of business processes and controls * Act as an internal SME for escalations, consulting, and problem-solving * Provide governance over issue resolution and corrective actions * Ensure integrity of processing and workflows through cross-department collaboration * Maintain and manage the department's procedures and documentation library, ensuring accuracy and currency ## Related Videos - [GenAI Security: Navigating the Unseen Iceberg](https://www.wearedevelopers.com/videos/1744-genai-security-navigating-the-unseen-iceberg) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Your imaginations is (no longer) the limit: how Generative AI empowers people to be creative](https://www.wearedevelopers.com/videos/741-your-imaginations-is-no-longer-the-limit-how-generative-ai-empowers-people-to-be-creative) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [The shadows that follow the AI generative models](https://www.wearedevelopers.com/videos/624-the-shadows-that-follow-the-ai-generative-models) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)