Back to results

Global Technology Risk Manager

  • Greater Montreal Metropolitan Area, QC, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Apply by
Posting language
English
Posted

Original job description

We are seeking a highly motivated Technology Risk Manager to strengthen our global risk management capabilities. This role will be the guardian of our Global Technology Risk Management methodology and risk register, ensuring consistency, operational excellence, and value delivery across the enterprise and line of business. The Manager will drive the continuous improvement of the Technology Risk Management framework, oversee the Third-Party Risk Management (Tech TPRM) process, and ensure timely delivery of monthly metrics and performance reports. Acting as the bridge between Risk Analysts, Business, IT Departments and Cyber Advisory, this leader will manage ad hoc risk assessments and guide the team in identifying, evaluating, and reporting on technology risks.

Additionally,Serve as the primary risk oversight function for IT leadership across all BRP business units, ensuring technology risks are proactively identified, challenged, evaluated, and managed in alignment with BRP's risk appetite and business objectives.

You’ll Have The Opportunity To

  • Lead the Technology Risk Management team, ensuring effective collaboration and delivery.
  • Evolve and manage the Technology Risk Management framework and methodology.
  • Oversee and operationalize the technology risk register, ensuring risks are logged, assessed, tracked, and reported accurately.
  • Coordination with senior IT management to monitor key Technical Debts, associated residual risks, and action plans
  • Drive the Tech TPRM process, ensuring vendor risk assessments and mitigation plans are consistently executed.
  • Produce and present executive reports on residual IT risks and key risk indicators to senior stakeholders.
  • Support ad hoc and project-based risk assessments, in close alignment with Cyber Advisory.
  • Partner with IT/OT Compliance teams to align on action plans related to internal IT and OT controls.
  • Establish and track monthly metrics to monitor program effectiveness and team performance.
  • Close coordination with the global IT compliance team to manage IT risk posture (quarterly metrics, accumulation of technical risks)
  • Developing relationships with key global executives to understand, map, and address risk scenarios associated with the various BRP geographies

YOU’LL THRIVE IN THIS ROLE IF YOU HAVE THE FOLLOWING SKILLS AND QUALITIES:

  • Bachelor’s degree in Information Security, Risk Management, or a related field.
  • Solid experience in technology risk analysis (quantitative and qualitative).
  • Strong knowledge of NIST Risk Management Framework (NIST RMF), ISO 27001 standards, and the FAIR methodology for quantitative risk analysis.
  • Previous experience working closely with Advisory teams on risk, security, or compliance topics.
  • Demonstrated ability to prepare and deliver executive-level reports on IT residual risks.
  • Strong understanding of IT and OT internal controls, SOx compliance, and related governance frameworks.
  • Proven leadership skills with the ability to guide and inspire a team of analysts.
  • Excellent communication and interpersonal skills, with fluency in English
  • Knowledge of other languages, such as German, Spanish, or Finnish, will be considered an asset
  • Ability to work on-site 3 days per week at Montreal, Sherbrooke, or Valcourt.

ACKNOWLEDGING THE POWER OF DIVERSITY

BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!

For this reason, we value diversity and we strive to always push each other forward to build an inclusive workplace where every employee feels like they belong, where they can grow and find meaning.

AT BRP, WHEN WE TALK ABOUT BENEFITS, WE GO ALL IN.

Let’s start with a strong foundation - You want it, we have it:

  • Annual bonus based on the company’s financial results
  • Generous paid time away
  • Pension plan
  • Collective saving opportunities
  • Industry leading healthcare fully paid by BRP

What About Some Feel Good Perks

  • Flexible work schedule
  • A summer schedule that varies by department and location
  • Holiday season shutdown
  • Educational resources
  • Discount on BRP products

WELCOME TO BRP

We’re a world leader in recreational vehicles and boats, creating innovative ways to move on snow, water, asphalt, dirt and even in the air. Headquartered in the Canadian town of Valcourt, Quebec, our company is rooted in a spirit of ingenuity and intense customer focus. Today, we operate manufacturing facilities in Canada, the United States, Mexico, Finland, Australia and Austria, with a workforce made up of close to 17,000 spirited people, all driven by the deeply held belief that at work, as with life itself, it’s not about the destination: It’s about the journey.

More about this job

Responsibilities

Lead the global Technology Risk Management team and continuously improve its framework, methodology, risk register, and third-party risk processes. Coordinate risk assessments and technical debt oversight, align with IT, OT, compliance, and Cyber Advisory teams, and deliver risk metrics and executive reports to senior stakeholders.

Requirements

A bachelor’s degree in Information Security, Risk Management, or a related field is requested, along with solid technology risk analysis experience and knowledge of NIST RMF, ISO 27001, and FAIR. The role also calls for experience with advisory teams, executive risk reporting, IT/OT controls and SOX compliance, leadership ability, strong communication skills, and English fluency.

Skills

  • Technology Risk Management
  • Quantitative And Qualitative Risk Analysis
  • NIST Risk Management Framework
  • ISO 27001
  • FAIR Methodology
  • Third-Party Risk Management
  • Risk Register Management
  • Executive Reporting
  • IT And OT Internal Controls
  • SOX Compliance
  • Risk Assessment
  • Cybersecurity Advisory
  • Technical Debt Risk Management
  • Risk Metrics And Key Risk Indicators
  • Team Leadership
  • Stakeholder Communication

Benefits

  • Annual Bonus
  • Paid Time Off
  • Pension Plan
  • Collective Savings Opportunities
  • Fully Paid Healthcare
  • Flexible Work Schedule
  • Summer Schedule
  • Holiday Season Shutdown
  • Educational Resources
  • Discounts On BRP Products

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Management & Leadership
  • Security & Safety
  • Manufacturing

Keywords

  • Technology Risk Management
  • Risk Management Framework
  • Risk Register
  • Third-Party Risk Management
  • NIST Risk Management Framework
  • ISO 27001
  • FAIR Methodology
  • Quantitative Risk Analysis
  • Qualitative Risk Analysis
  • IT Risk
  • OT Risk
  • Cybersecurity
  • Cyber Advisory
  • SOX Compliance
  • Internal Controls
  • Technical Debt
  • Residual Risk
  • Risk Appetite
  • Vendor Risk Assessments
  • Mitigation Plans
  • Key Risk Indicators
  • Executive Reporting
  • Risk Metrics
  • IT Compliance
  • Risk Governance
  • Project-Based Risk Assessments
  • Business Risk
  • Global Risk Management

Report this job