System Governance Specialist
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
The ideal candidate has a combined audit or risk management experience with a solid understanding of technology and system controls. The candidate will support the organization's technology governance, risk, audit, and compliance activities and will work closely with business and technical teams to strengthen internal controls, assess risks, coordinate audits, and promote effective governance practices across technology functions.
Responsibilities
- Demonstrated experience in technology governance, risk management, and compliance initiatives support.
- Prepare governance, risk, and compliance reports to support informed decision-making.
- Experience in technology and operational risks assessment and recommendations to practical mitigation strategies.
- Develop, maintain, and monitor risk registers, control documentation, and governance reporting.
- Collaborate with technical and business teams to embed appropriate controls into systems, processes, and projects.
- Internal and external audits coordination, including tracking findings and remediation activities.
- Analyze audit results and translate findings into actionable improvement plans.
- Monitor remediation efforts and provide regular status updates to leadership and stakeholders.
- Facilitate governance meetings and promote accountability for risk and control activities.
- Develop and maintain key metrics to measure risk exposure, control effectiveness, and compliance performance.
- Support ongoing audit readiness by maintaining documentation and improving governance processes.
- Ensure technology governance activities align with organizational policies, regulatory requirements, and industry best practices.
- Identify opportunities to enhance governance frameworks, standardize controls, and improve operational resilience.
Requirements
- Experience in IT audit and governance, risk management, compliance, or a related field.
- Solid understanding of technology controls, governance frameworks, and risk management principles.
- Experience coordinating audits and managing remediation activities.
- Ability to translate technical risks into clear business recommendations.
- Experience working with cross-functional business and technology teams.
- Certifications in any of the following: CISSP, CISA, CGEIT, CRISC, or equivalent, are ideal.
More about this job
Responsibilities
Support technology governance, risk, audit, and compliance activities by assessing risks, maintaining risk registers and control documentation, and embedding controls into systems and processes. Coordinate audits and remediation, report findings and risk metrics to stakeholders, and improve governance frameworks and audit readiness.
Requirements
Experience in IT audit, technology governance, risk management, compliance, or a related field is required, along with a solid understanding of technology controls and risk management principles. Candidates should be able to coordinate audits and remediation, communicate technical risks as business recommendations, and collaborate across business and technology teams; CISSP, CISA, CGEIT, CRISC, or equivalent certifications are ideal.
Skills
- Technology Governance
- Risk Management
- IT Audit
- Compliance
- Technology Controls
- Risk Assessment
- Risk Mitigation
- Audit Coordination
- Remediation Management
- Governance Reporting
- Control Documentation
- Cross-Functional Collaboration
- Stakeholder Communication
- Metrics Development
- Regulatory Compliance
- Operational Resilience
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Finance & Accounting
- Management & Leadership
- Security & Safety
Keywords
- Technology Governance
- IT Audit
- Risk Management
- Compliance
- Technology Controls
- Governance Frameworks
- Risk Assessment
- Risk Registers
- Control Documentation
- Governance Reporting
- Internal Audit
- External Audit
- Audit Readiness
- Remediation Activities
- Operational Risk
- Regulatory Requirements
- Industry Best Practices
- Operational Resilience
- CISSP
- CISA
- CGEIT
- CRISC