Senior Analyst, Technology Risk and Controls
- Winnipeg, MB, Canada
The base salary for this position is between $85,200.00 - $135,200.00 annually. · Full-time
Applications open in a new tab.
Job details
- Pay
- The base salary for this position is between $85,200.00 - $135,200.00 annually.
- Job type
- Full-time
- Apply by
- Experience
- 3 to 5 years of experience within the field of technology risk, control and compliance
- Posting language
- English
- Posted
Original job description
Permanent Full Time
Technology redefines the way we work and deliver to meet business needs and elevate the customer experience. You’ll be part of an organization that is embracing modern technology, innovation, and agile ways of working.
Our Technology team is a strategic partner in our business – with an ambition to be a forward-thinking, agile technology organization delivering secure, resilient, and leading solutions that support Canada Life and the well-being of millions of Canadians.
We are looking for a Senior Technology Risk Analyst to join our Technology Risk & Controls team in the first line of defence and strengthen risk & control practices across the Technology organization.
What you will do:
Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis.
Grow with Canada Life
We’re united by a shared purpose: to improve the financial, physical and mental well-being of Canadians. Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country.
We’re looking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers, communities and each other. Are you someone who always strives to do the right thing, who steps up for themselves and others, and who delivers with impact? Then we want to hear from you!
What we offer:
We’re committed to supporting our employees through every stage of their career. Here’s what you can expect as a full-time or part-time permanent team member:
We’re committed to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact talentacquisitioncanada@canadalife.com. All information provided will be handled in accordance with applicable laws and Canada Life policies.
Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted.
Technology redefines the way we work and deliver to meet business needs and elevate the customer experience. You’ll be part of an organization that is embracing modern technology, innovation, and agile ways of working.
Our Technology team is a strategic partner in our business – with an ambition to be a forward-thinking, agile technology organization delivering secure, resilient, and leading solutions that support Canada Life and the well-being of millions of Canadians.
We are looking for a Senior Technology Risk Analyst to join our Technology Risk & Controls team in the first line of defence and strengthen risk & control practices across the Technology organization.
What you will do:
- Drive consistency across the organization by executing and maintaining the technology risk & controls framework and technology risk management processes
- Provide extensive subject matter expertise in key technology risk management areas such as information security, operations, IT Resiliency, and technology delivery
- Provide guidance to Technology teams in the design, implementation, and continuous monitoring of controls that reduce a broad spectrum of technology and cyber risks
- Execute risk & control assessments supporting key initiatives and technology processes
- Maintain risk & control data in enterprise Governance, Risk and Compliance (GRC) systems
- Coordinate with Line 2 and Internal Audit during their reviews and assessments of 1st line risk & control activities
- Support day-to-day management of issue register documentation including tracking, reviewing remediation evidence, obtaining updates and consolidating remediation progress on self-identified technology issues, and audit findings
- Support the review and challenge of exceptions / risk acceptances aligning to enterprise policies and standards
- Assist in ongoing monitoring of compliance with policies and standards and enforce compliance with policies and standards across all levels of the organization
- Promote technology risk culture across the organization
- 3 to 5 years of experience within the field of technology risk, control and compliance
- Experience with Governance, Risk and Compliance (GRC) platforms, e.g. ServiceNow IRM
- Excellent business writing and communication skills, with great attention to detail
- Strong understanding of technology delivery, operations, and risk management practices
- Ability to build a strong rapport with technology teams and build consensus
- Ability to manage multiple competing priorities under time pressure without compromising quality
- Ability to operate in an entrepreneurial environment - being a self-starter, results-oriented, and highly motivated while being effective in a fast-paced and evolving environment
- Undergraduate Degree or Post Graduate in Computer Science, Computer Engineering or a similar field
- Accreditations such as CRISC, CISA, CISSP an asset
Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis.
Grow with Canada Life
We’re united by a shared purpose: to improve the financial, physical and mental well-being of Canadians. Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country.
We’re looking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers, communities and each other. Are you someone who always strives to do the right thing, who steps up for themselves and others, and who delivers with impact? Then we want to hear from you!
What we offer:
We’re committed to supporting our employees through every stage of their career. Here’s what you can expect as a full-time or part-time permanent team member:
- Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to $2,000 annually towards education reimbursement.
- Health & Wellness: Flexible health and dental benefits, plus a $5,000 mental health benefit to support your well-being.
- Time Off: In addition to regular vacation and personal days, we support community involvement with a volunteer day.
- Financial Security: Company-matching pension plan, share ownership program and additional investment options.
- Rewards and Recognition: Employee recognition programs, service milestone celebrations, employee discounts and more!
- Emphasis on Community: We provide a workplace where employees feel connected and supported through Employee Resource Groups (ERGs), mentorship programs, social clubs and events.
We’re committed to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact talentacquisitioncanada@canadalife.com. All information provided will be handled in accordance with applicable laws and Canada Life policies.
Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted.
More about this job
Responsibilities
Maintain and execute the technology risk and controls framework, advise technology teams on controls and risk management, and conduct risk and control assessments. Maintain GRC data and issue documentation, coordinate with second-line risk teams and Internal Audit, monitor compliance, and promote a strong technology risk culture.
Requirements
Requires 3–5 years of experience in technology risk, controls, and compliance, along with strong knowledge of technology delivery, operations, and risk management. A degree in computer science, computer engineering, or a similar field is required; CRISC, CISA, or CISSP credentials are an asset.
Skills
- Technology Risk Management
- Risk and Control Assessments
- Information Security
- IT Operations
- IT Resiliency
- Technology Delivery
- Control Design and Monitoring
- Governance, Risk, and Compliance Systems
- ServiceNow IRM
- Issue Remediation Tracking
- Policy and Standards Compliance
- Audit Coordination
- Business Writing
- Communication
- Stakeholder Relationship Building
- Prioritization
Benefits
- Career Advancement Opportunities
- Learning Programs
- Education Reimbursement
- Health Benefits
- Dental Benefits
- Mental Health Benefit
- Vacation
- Personal Days
- Volunteer Day
- Company-Matching Pension Plan
- Share Ownership Program
- Investment Options
- Employee Recognition Programs
- Employee Discounts
- Employee Resource Groups
- Mentorship Programs
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Finance & Accounting
Keywords
- Technology Risk
- Technology Controls
- Risk Management Framework
- Information Security
- Cyber Risk
- IT Operations
- IT Resiliency
- Technology Delivery
- Risk and Control Assessments
- Governance, Risk, and Compliance
- GRC Systems
- ServiceNow IRM
- Internal Audit
- Issue Register
- Remediation Evidence
- Risk Acceptance
- Enterprise Policies
- Compliance Monitoring
- CRISC
- CISA
- CISSP
- Computer Science
- Computer Engineering
- First Line of Defence
- Second Line of Defence