IT Risk Management Specialist

Posted 3 hours ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • IT risk specialist strengthening BDC’s operational, information security, and technology risk framework. Supporting governance, assessments, remediation, and reporting for BDC’s Canadian entrepreneur-focused banking mission.

Responsibilities

  • Support first- and second-line stakeholders in Operational Risk Management programs, including RCSA, KRI, Operational Risk Events, BCM, Risk Appetite activities, and risk assessments for new products, projects, and business initiatives
  • Review and challenge Information Security and Technology risk assessments completed by the first line of defence
  • Review and challenge operational risk events related to Information Security and Technology
  • Monitor remediation activities and action plans to ensure risks are addressed effectively
  • Recommend enhancements to technology risk assessment methodologies, processes, and tools
  • Support continuous improvement of ORM practices in alignment with operational realities and industry best practices
  • Manage ORM reporting activities, including data collection and analysis, risk reporting, action plan tracking, and committee and governance presentations
  • Develop and maintain relationships with first-line leadership, second-line risk functions, and senior management
  • Develop, maintain, and enhance ORM governance documents, procedures, and methodologies
  • Coach and mentor junior team members
  • Contribute to initiatives supporting BDC’s mission of helping Canadian entrepreneurs succeed while maintaining sound risk management practices

Requirements

  • Bachelor’s degree in Information Technology, Communications, Business Administration, Social Sciences, or a related discipline
  • Minimum five (5) years of experience in Technology Risk Management, Technology Resilience, Technology Audit, Information Security Risk Management, or related risk management disciplines
  • Demonstrated expertise in IT Operations, Information Security (InfoSec), Data Risk Management, Digital Technology Risk, or Emerging Technology Risk
  • Knowledge of governance, risk, and control frameworks, including the Three Lines of Defence model
  • Experience reviewing, assessing, and challenging technology and information security risks
  • Experience monitoring remediation plans, corrective actions, and risk mitigation activities
  • Ability to analyze complex business requirements and translate them into risk management considerations
  • Strong analytical and quantitative skills
  • Advanced Microsoft Excel skills
  • Excellent written and verbal communication skills in both French and English
  • Experience preparing and delivering presentations to stakeholders and senior leaders
  • Ability to work effectively with senior stakeholders and provide credible challenge when required
  • Ability to manage multiple priorities and work in a fast-paced environment
  • Strong planning, coordination, organization, implementation, and training skills
  • Demonstrated judgment in identifying, escalating, and mitigating risks that may impact business operations
  • Ability to meet deadlines and work effectively in a multicultural and bilingual environment
  • Proficiency with Microsoft Word, Microsoft PowerPoint, Microsoft Visio, and Microsoft Office Suite
  • Ability to build trusted relationships with internal stakeholders
  • Ability to clearly explain risk management initiatives and gain stakeholder engagement
  • Demonstrated ability to leverage AI tools to improve efficiency and enhance the quality of work products

Benefits

  • Flexible and competitive benefits
  • Employee Savings and Investment Plan with employer matching of voluntary contributions
  • Defined Benefit Pension Plan
  • $750 wellness and health care spending account
  • Paid vacation each year
  • Five personal days
  • Sick days as necessary
  • Offices closed from December 25 to January 1
  • Hybrid work model
  • Opportunities for learning, training and development

Job title

Job type

Full Time

Experience level

Mid levelSenior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

HybridMontrealCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.