Cybersecurity Architect

The Cybersecurity Architect is responsible for supporting projects that apply new and existing technologies and solutions to solve business needs in the cybersecurity space, for the US business segment. This Architect works with other architects, engineers, technical SMEs, and operational support staff both within IT and other business units to provide and maintain solutions that meet business and technical requirements.

The Architect will assist in the development of technology roadmaps and documentation; act as the subject matter expert in a variety of domains such as Identity and Access Management (IAM), SIEM integration, IR automation, etc. The Architect will maintain a solid understanding of the entire Information Security landscape.

This role is a unique opportunity to join a team and company whose work will have direct impact on company direction, our customers, and our industry.

Position Responsibilities:

• Contribute to the development and evolution of cybersecurity strategies, architecture standards, and technology roadmaps aligned with Zero Trust principles and business priorities.
• Design and guide security architectures across areas such as IAM, SIEM and security operations, cloud security, application security, and incident-response automation.
• Design enterprise solutions that incorporate appropriate security controls and risk-mitigation strategies across modern and legacy technology environments.
• Lead and contribute to conceptual, solution, and component-level security architectures and develop reusable reference architectures and implementation patterns.
• Review solution architectures, provide security guidance, and help architects and engineering teams align solutions with established security standards and architecture principles.
• Evaluate third-party technologies, platforms, suppliers, and emerging security capabilities, providing recommendations based on security, architecture, and business requirements.
• Partner with architects, engineers, security teams, technology operations, and business stakeholders to design secure, resilient, and supportable solutions.
• Assess relevant vulnerabilities, security alerts, and threat intelligence and translate emerging threats into architecture guidance and appropriate risk-mitigation strategies.
• Support security investigations and incident-response activities by providing architecture and technical expertise where needed.
• Maintain awareness of evolving cybersecurity technologies, industry practices, and threat trends and incorporate relevant developments into security strategy and architecture.
• Build collaborative relationships with internal and external technology stakeholders and clearly communicate security requirements, architectural decisions, risks, and trade-offs.
• Provide hands-on technical guidance and support for security solutions and architecture validation, including participation in after-hours response to significant security incidents when required.

Required Qualifications:

• Extensive relevant experience in cybersecurity, security engineering, or security architecture, typically gained through 7+ years of professional experience or equivalent demonstrated expertise.
• Strong knowledge of core application and platform security concepts, including authentication, authorization, transport security, secure configuration, data validation, and security logging.
• Experience designing or supporting enterprise security solutions across areas such as IAM, SIEM/security operations, cloud security, application security, or infrastructure security.
• Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.
• Understanding of cloud-native architecture, modern application patterns, and infrastructure security principles.
• Working knowledge of security considerations across common enterprise operating systems, including Windows, macOS, and Linux environments.
• Strong understanding of network protocols, network security concepts, and common enterprise security architecture patterns.
• Experience with SaaS, IaaS, and PaaS environments and cloud security practices using platforms such as Microsoft Azure, AWS, GCP, or comparable cloud technologies.
• Knowledge of recognized cybersecurity frameworks and practices, such as NIST.
• Hands-on technical capability with scripting, operating-system tooling, troubleshooting, and security configuration sufficient to support architecture validation and complex solution design.
• Understanding of modern software development lifecycles and how security is incorporated into Agile and iterative development practices.
• Strong written and verbal communication skills, with the ability to explain complex security requirements, risks, architecture decisions, and trade-offs to both technical and non-technical stakeholders.

Preferred Qualifications:

• Familiarity with incident-response tooling and digital-forensics concepts.
• Experience with secrets management, security monitoring, SIEM, and related enterprise security technologies.
• Experience supporting security architectures in a large, complex, or regulated enterprise environment.
• Familiarity with security automation, DevSecOps, or related approaches for integrating security into technology delivery.
• Security certifications such as CISSP or other relevant cybersecurity certifications.
• Bachelor's degree in computer science, cybersecurity, engineering, information systems, or a related discipline, or equivalent practical experience. A master's degree in a relevant discipline is an asset.

When You Join Our Team:

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see. 

If you are applying to this role in US, please note the salary range is $107,450 to $199,550 USD. Additionally, employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.

The role being advertised is an existing vacancy.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact hr@manulife.com.

Referenced Salary Location

CAN, Ontario, Toronto, 200 Bloor Street EastHybrid

Salary range is expected to be between

$113,000.00 CAD - $163,000.00 CAD

Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact hr@manulife.com for the salary range for your location.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact hr@manulife.com for more information about U.S.-specific paid time off provisions.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.