IT risk specialist strengthening BDC’s operational, information security, and technology risk framework. Supporting governance, assessments, remediation, and reporting for BDC’s Canadian entrepreneur-focused banking mission.
Responsibilities
Support first- and second-line stakeholders in Operational Risk Management programs, including RCSA, KRI, Operational Risk Events, BCM, Risk Appetite activities, and risk assessments for new products, projects, and business initiatives
Review and challenge Information Security and Technology risk assessments completed by the first line of defence
Review and challenge operational risk events related to Information Security and Technology
Monitor remediation activities and action plans to ensure risks are addressed effectively
Recommend enhancements to technology risk assessment methodologies, processes, and tools
Support continuous improvement of ORM practices in alignment with operational realities and industry best practices
Manage ORM reporting activities, including data collection and analysis, risk reporting, action plan tracking, and committee and governance presentations
Develop and maintain relationships with first-line leadership, second-line risk functions, and senior management
Develop, maintain, and enhance ORM governance documents, procedures, and methodologies
Coach and mentor junior team members
Contribute to initiatives supporting BDC’s mission of helping Canadian entrepreneurs succeed while maintaining sound risk management practices
Requirements
Bachelor’s degree in Information Technology, Communications, Business Administration, Social Sciences, or a related discipline
Minimum five (5) years of experience in Technology Risk Management, Technology Resilience, Technology Audit, Information Security Risk Management, or related risk management disciplines
Demonstrated expertise in IT Operations, Information Security (InfoSec), Data Risk Management, Digital Technology Risk, or Emerging Technology Risk
Knowledge of governance, risk, and control frameworks, including the Three Lines of Defence model
Experience reviewing, assessing, and challenging technology and information security risks
Experience monitoring remediation plans, corrective actions, and risk mitigation activities
Ability to analyze complex business requirements and translate them into risk management considerations
Strong analytical and quantitative skills
Advanced Microsoft Excel skills
Excellent written and verbal communication skills in both French and English
Experience preparing and delivering presentations to stakeholders and senior leaders
Ability to work effectively with senior stakeholders and provide credible challenge when required
Ability to manage multiple priorities and work in a fast-paced environment
Strong planning, coordination, organization, implementation, and training skills
Demonstrated judgment in identifying, escalating, and mitigating risks that may impact business operations
Ability to meet deadlines and work effectively in a multicultural and bilingual environment
Proficiency with Microsoft Word, Microsoft PowerPoint, Microsoft Visio, and Microsoft Office Suite
Ability to build trusted relationships with internal stakeholders
Ability to clearly explain risk management initiatives and gain stakeholder engagement
Demonstrated ability to leverage AI tools to improve efficiency and enhance the quality of work products
Benefits
Flexible and competitive benefits
Employee Savings and Investment Plan with employer matching of voluntary contributions
Defined Benefit Pension Plan
$750 wellness and health care spending account
Paid vacation each year
Five personal days
Sick days as necessary
Offices closed from December 25 to January 1
Hybrid work model
Opportunities for learning, training and development
Agent agricole chez Promutuel Assurance, conseillant producteurs et entreprises sur leurs protections d’assurance. Gérant un portefeuille et développant les affaires sur le territoire de Saint - Hyacinthe et Acton Vale.
Claims advisor handling property and casualty insurance investigations, settlements, and negotiations for Desjardins. Serving members and clients across multiple Québec locations through full - time telework.
Claims advisor handling property and casualty insurance claims for Desjardins members and clients. Investigating damage, assessing benefits, negotiating settlements, and approving claims.
Financial Services Consultant advising departing group - benefit members on insurance conversions for Sun Life. Handling phone consultations, needs discovery, and insurance sales targets.
Crop assurance specialist shaping agricultural policy and crop health programs for Alberta’s agriculture sector. Researching legislation, advising stakeholders, and developing crop health strategies.
Business Projects Consultant improving group insurance practices at Beneva. Leading business analysis, operational improvements, change implementation, and complex stakeholder advisory work.
Agent(e) en assurance de dommages chez Promutuel Assurance. Conseiller les membres - assurés, renouveler leurs protections et soutenir la fidélisation.
Personal Insurance Advisor serving clients, selling policies, and managing renewals for BrokerLink’s Spriggs Insurance team. Onsite role based in Georgetown or Oakville.