IT GRC Coordinator
- Hamilton, ON, Canada
Salary Range: $53,122 to $73,042 annually. · Full-time
Applications open in a new tab.
Job details
- Pay
- Salary Range: $53,122 to $73,042 annually.
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
- Competitive compensation packages
- Top-tier health and wellness benefits, including comprehensive benefits packages, a yearly health spending account and personal spending account
- Enhanced mental health benefits through SunLife and TELUS Health
- Exclusive banking benefits
- Up to $1000 per year towards professional development
- Pension Plan
- Flex-work environment
- Company-wide Employee Volunteer program (Blue Wave Program)
- Employee and Family Assistance Program
The IT GRC Coordinator supports the organization's Governance, Risk Management, and Compliance (GRC) activities. This is a supportive role that assists with maintaining IT policies, tracking IT compliance activities, and supporting IT risk management practices, with a focus on FSRA IT Risk Management Guidance. The position collaborates with internal teams such as IT, Risk, Internal Audit, and Legal to help ensure regulatory and internal requirements are met.
Role
- Support the maintenance and updating of IT policies, standards, and procedures in alignment with regulatory requirements and internal guidelines.
- Assist with IT risk assessments by gathering information, documenting risks, and maintaining risk registers.
- Assist in tracking remediation actions and follow up with stakeholders on assigned risk or compliance activities.
- Monitor and document compliance activities and provide status updates to senior GRC or management staff.
- Support the testing and monitoring of information security control effectiveness to strengthen IT compliance and mitigate IT risk.
- Support internal audits, reviews, and assessments by collecting evidence and maintaining documentation.
- Help coordinate and document compliance reviews to ensure policies and procedures are being followed.
- Assist in preparing awareness materials and supporting training activities related to IT policies and compliance expectations.
- Maintain GRC documentation, logs, and records to support audits, examinations, and internal reviews.
- Escalate identified issues, gaps, or risks to senior team members as appropriate.
- Perform additional duties as required.
- University degree/College diploma related to Information Technology or Risk and Compliance
- Two (2) years of experience within an IT or a GRC related field (within the financial sector preferred)
- Working knowledge of ISO 27001 is considered an asset
- Familiarity of other standards and frameworks (e.g., PCI DSS, NIST CSF, SOC 2) considered beneficial and supported through ongoing development. Applied basic JavaScript skills is beneficial
- Possess exceptional analytical skills and the curiosity to solve complex problems.
- Be approachable with excellent interpersonal, written, and verbal communication skills
- Be aware of and mitigate enterprise risk factors and ensure compliance with applicable regulations, legislation and FirstOntario policies and procedures
Salary Range: $53,122 to $73,042 annually.
Compensation for this role reflects a combination of skills, experience, and internal equity. Those whose experience more closely aligns the role's requirements may be placed higher within the salary range. You will learn more about FirstOntario Credit Union's total rewards package during the interview process.
Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know.
More about this job
Responsibilities
Support the maintenance of IT policies and documentation, assist with risk assessments and remediation tracking, and monitor compliance activities and information security controls. Coordinate audit and compliance reviews, maintain evidence and records, support awareness and training, and escalate identified risks or gaps.
Requirements
A university degree or college diploma related to Information Technology or Risk and Compliance is required, along with two years of experience in IT or a GRC-related field; financial-sector experience is preferred. Working knowledge of ISO 27001 is an asset, familiarity with PCI DSS, NIST CSF, or SOC 2 is beneficial, and basic JavaScript skills are an advantage.
Skills
- IT Governance, Risk, And Compliance
- IT Risk Assessment
- Risk Register Management
- Regulatory Compliance
- IT Policy Maintenance
- Information Security Controls
- Audit Support
- Compliance Monitoring
- ISO 27001
- PCI DSS
- NIST CSF
- SOC 2
- JavaScript
- Analytical Skills
- Written Communication
- Verbal Communication
Benefits
- Competitive Compensation
- Health And Wellness Benefits
- Health Spending Account
- Personal Spending Account
- Mental Health Benefits
- Banking Benefits
- Professional Development Funding
- Pension Plan
- Flexible Work Environment
- Employee Volunteer Program
- Employee And Family Assistance Program
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Finance & Accounting
Keywords
- Governance, Risk, And Compliance
- IT Risk Management
- IT Policies
- IT Standards
- IT Procedures
- Risk Assessments
- Risk Registers
- Remediation Actions
- Regulatory Requirements
- Compliance Monitoring
- Information Security Controls
- Control Effectiveness Testing
- Internal Audits
- Compliance Reviews
- Audit Evidence
- ISO 27001
- PCI DSS
- NIST CSF
- SOC 2
- JavaScript
- Financial Sector
- Risk Management
- Awareness Training