Global Technology Risk Manager
- Greater Montreal Metropolitan Area, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Additionally,Serve as the primary risk oversight function for IT leadership across all BRP business units, ensuring technology risks are proactively identified, challenged, evaluated, and managed in alignment with BRP's risk appetite and business objectives.
You’ll Have The Opportunity To
- Lead the Technology Risk Management team, ensuring effective collaboration and delivery.
- Evolve and manage the Technology Risk Management framework and methodology.
- Oversee and operationalize the technology risk register, ensuring risks are logged, assessed, tracked, and reported accurately.
- Coordination with senior IT management to monitor key Technical Debts, associated residual risks, and action plans
- Drive the Tech TPRM process, ensuring vendor risk assessments and mitigation plans are consistently executed.
- Produce and present executive reports on residual IT risks and key risk indicators to senior stakeholders.
- Support ad hoc and project-based risk assessments, in close alignment with Cyber Advisory.
- Partner with IT/OT Compliance teams to align on action plans related to internal IT and OT controls.
- Establish and track monthly metrics to monitor program effectiveness and team performance.
- Close coordination with the global IT compliance team to manage IT risk posture (quarterly metrics, accumulation of technical risks)
- Developing relationships with key global executives to understand, map, and address risk scenarios associated with the various BRP geographies
- Bachelor’s degree in Information Security, Risk Management, or a related field.
- Solid experience in technology risk analysis (quantitative and qualitative).
- Strong knowledge of NIST Risk Management Framework (NIST RMF), ISO 27001 standards, and the FAIR methodology for quantitative risk analysis.
- Previous experience working closely with Advisory teams on risk, security, or compliance topics.
- Demonstrated ability to prepare and deliver executive-level reports on IT residual risks.
- Strong understanding of IT and OT internal controls, SOx compliance, and related governance frameworks.
- Proven leadership skills with the ability to guide and inspire a team of analysts.
- Excellent communication and interpersonal skills, with fluency in English
- Knowledge of other languages, such as German, Spanish, or Finnish, will be considered an asset
- Ability to work on-site 3 days per week at Montreal, Sherbrooke, or Valcourt.
BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!
For this reason, we value diversity and we strive to always push each other forward to build an inclusive workplace where every employee feels like they belong, where they can grow and find meaning.
AT BRP, WHEN WE TALK ABOUT BENEFITS, WE GO ALL IN.
Let’s start with a strong foundation - You want it, we have it:
- Annual bonus based on the company’s financial results
- Generous paid time away
- Pension plan
- Collective saving opportunities
- Industry leading healthcare fully paid by BRP
- Flexible work schedule
- A summer schedule that varies by department and location
- Holiday season shutdown
- Educational resources
- Discount on BRP products
We’re a world leader in recreational vehicles and boats, creating innovative ways to move on snow, water, asphalt, dirt and even in the air. Headquartered in the Canadian town of Valcourt, Quebec, our company is rooted in a spirit of ingenuity and intense customer focus. Today, we operate manufacturing facilities in Canada, the United States, Mexico, Finland, Australia and Austria, with a workforce made up of close to 17,000 spirited people, all driven by the deeply held belief that at work, as with life itself, it’s not about the destination: It’s about the journey.
More about this job
Responsibilities
Lead the global Technology Risk Management team and continuously improve its framework, methodology, risk register, and third-party risk processes. Coordinate risk assessments and technical debt oversight, align with IT, OT, compliance, and Cyber Advisory teams, and deliver risk metrics and executive reports to senior stakeholders.
Requirements
A bachelor’s degree in Information Security, Risk Management, or a related field is requested, along with solid technology risk analysis experience and knowledge of NIST RMF, ISO 27001, and FAIR. The role also calls for experience with advisory teams, executive risk reporting, IT/OT controls and SOX compliance, leadership ability, strong communication skills, and English fluency.
Skills
- Technology Risk Management
- Quantitative And Qualitative Risk Analysis
- NIST Risk Management Framework
- ISO 27001
- FAIR Methodology
- Third-Party Risk Management
- Risk Register Management
- Executive Reporting
- IT And OT Internal Controls
- SOX Compliance
- Risk Assessment
- Cybersecurity Advisory
- Technical Debt Risk Management
- Risk Metrics And Key Risk Indicators
- Team Leadership
- Stakeholder Communication
Benefits
- Annual Bonus
- Paid Time Off
- Pension Plan
- Collective Savings Opportunities
- Fully Paid Healthcare
- Flexible Work Schedule
- Summer Schedule
- Holiday Season Shutdown
- Educational Resources
- Discounts On BRP Products
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Management & Leadership
- Security & Safety
- Manufacturing
Keywords
- Technology Risk Management
- Risk Management Framework
- Risk Register
- Third-Party Risk Management
- NIST Risk Management Framework
- ISO 27001
- FAIR Methodology
- Quantitative Risk Analysis
- Qualitative Risk Analysis
- IT Risk
- OT Risk
- Cybersecurity
- Cyber Advisory
- SOX Compliance
- Internal Controls
- Technical Debt
- Residual Risk
- Risk Appetite
- Vendor Risk Assessments
- Mitigation Plans
- Key Risk Indicators
- Executive Reporting
- Risk Metrics
- IT Compliance
- Risk Governance
- Project-Based Risk Assessments
- Business Risk
- Global Risk Management