Senior Cybersecurity Specialist

Manulife is a leading international financial services provider, helping people make decisions easier and lives better.

Senior Application Security Specialist

We are seeking an experienced Senior Application Security Specialist to join our team. The successful candidate will play a critical role in establishing and maintaining our security and risk governance frameworks.

Responsibilities

• Perform code scanning, validation, tuning, and optimization using SAST, DAST, and SCA tools (e.g., Snyk, Burp Suite, SonarQube, Veracode, Checkmarx) to ensure accurate, prioritized, and actionable remediation results.
• Conduct penetration testing, code scanning, secrets management (GitGuardian), and threat modeling for business applications to determine risk ratings and prioritize discovered vulnerabilities with remediation timelines.
• Execute intake, triage, analysis, and reporting procedures for security assessments.
• Work with code repositories such as GitHub and CI/CD pipelines in Azure DevOps.
• Coordinate assessment and risk analysis activities, evaluate governance processes, and recommend improvement opportunities.
• Support the establishment, development, and maintenance of risk governance frameworks, risk assessment methodologies, risk metrics reporting, and risk management compliance protocols.
• Conduct vulnerability assessments and prioritize remediation activities in collaboration with stakeholders.
• Document findings and collaborate with cross‑functional teams to implement corrective actions.
• Work closely with senior security engineers, product partners, architects, and teams in Agile/DevOps environments.
• Communicate risk and compliance assessments and recommendations to business units and senior management.
• Lead and participate in meetings to review outstanding vulnerabilities and clarify business and technical impacts.
• Develop and report actionable KPIs and KRIs aligned with application security policies and standards.
• Analyze cyber defense policies for compliance with regulations and organizational standards.
• Lead meetings to analyze risk indicators and develop executive‑level dashboards.
• Maintain comprehensive documentation of governance processes and contribute to policy updates.
• Stay updated on evolving cybersecurity threats and enhance risk reporting processes.
• Provide professional advice and lead process or program execution.
• Be accountable for own work and contribute to setting standards in the discipline impacting other deliverables.

Required Qualifications

• Strong understanding of information security controls, vulnerability management, and risk management frameworks (NIST CSF, ISO 27001/27002).
• Experience working with Cloud technologies (Azure, AWS, Alibaba Cloud).
• Knowledge of cybersecurity principles, internal controls, and risk management tools.
• Proficiency in data visualization tools (Tableau, Power BI) and statistical data analysis.
• Hands‑on experience with JIRA, Confluence, and Microsoft 365.
• Experience with cybersecurity assessment frameworks (PTES, OWASP, OSSTM) and penetration testing.
• Understanding of legal and regulatory requirements related to cybersecurity and IT governance.
• Excellent communication skills to effectively convey risk assessments and security recommendations.
• Knowledge of ticketing and tracking tools such as ServiceNow – Security Operations, GRC systems like Archer.
• Understanding of technology risk management and governance frameworks.
• Proficiency in using risk assessment tools and software.

Preferred Qualifications

• CISSP, CSSLP, OSCP, GWAPT or equivalent industry‑recognized security certifications.
• Experience with Cybersecurity, Security Monitoring, Vulnerability Assessment, Penetration Testing, Threat Modeling, Security Assessment, Security Testing, and Cyber Threat Intelligence.

Benefits

• Health, dental, vision, short‑ and long‑term disability, life and AD&D insurance coverage.
• Adoption/surrogacy and wellness benefits, employee/family assistance plans.
• Retirement savings plans, including pension and global share ownership plan with employer matching contributions.
• Generous paid time off including holidays, vacation, personal and sick days, statutory leaves of absence.
• Competitive incentive programs tied to business and individual performance.

Equal Opportunity Employer

Manulife is an Equal Opportunity Employer. At Manulife/John Hancock, we embrace diversity and strive to create an inclusive work environment. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, color, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy‑related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law. It is our priority to remove barriers to provide equal access to employment.