Senior IT Risk & GRC Specialist
Duration: 6-month contract
Location: Toronto / Mississauga, ON
Work Model: Hybrid, currently 2 days onsite with expectation to increase to 4 days
Hours: Monday to Friday, 9:00 AM–5:00 PM
Extension/Conversion: Possible
Role Overview
Our client is seeking a Senior IT Risk & GRC Specialist to provide governance, risk, compliance and issue remediation oversight within a large, regulated technology environment. This individual will work closely with technology, risk and audit stakeholders to assess remediation activities, validate controls and support effective risk mitigation.
Key Responsibilities
- Lead assessments and validation of audit and regulatory finding remediation
- Evaluate evidence, remediation plans and control operating effectiveness
- Provide guidance on IT risk, governance, audit and GRC frameworks
- Perform independent challenge and oversight of technology risk issues
- Identify risk themes and trends and provide insights to senior stakeholders
- Support continuous improvement initiatives across governance and control practices
- Contribute to technology-enabled improvements leveraging tools such as AI, Power BI/Apps and Python
Must-Have Qualifications
- 10+ years of IT Risk, GRC, IT Audit or Technology Controls experience, ideally within regulated industries
- Strong experience with audit/regulatory findings, remediation validation and assurance reviews
- Strong knowledge of audit testing, evidence evaluation, root cause analysis and control effectiveness
- Experience with IT risk governance and GRC frameworks
- Exceptional written and verbal communication skills
- Professional certification or equivalent experience such as CISA, CRISC, CISM or CIA
Nice to Have
- CISSP
- AI security/risk experience
- ServiceNow
- Lean Six Sigma / continuous improvement experience
Ideal Profile: A senior IT Risk/GRC professional with a strong IT Audit foundation who can independently assess remediation work, challenge stakeholders effectively and communicate confidently across technology, risk and audit teams.
Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.
