Intermediate Risk and Control Analyst

Role : Intermediate Risk and Control Analyst

Location: Toronto, ON (Hybrid)

Experience: 5 - 8 years

Must Have Technical/Functional Skills:

• At least 5+ years of experience in Operational Controls Testing

• Perform control design assessments to ensure adequacy against identified risks

• Execute operating effectiveness testing (sample-based / data-driven).

• Ensure controls align with regulatory requirements and internal policies

• Strong understanding of banking operations, operational risk frameworks, and regulatory requirements

• Experience with control testing tools & GRC platforms (e.g., Archer, ServiceNow GRC)

• Certifications preferred: CPA / CIA / CISA / CRISC / FRM (any relevant)

• Operational Controls Testing

• Operating & Design Effectiveness Testing [walkthrough example from scheduling DE/OE meetings]

• Regulatory Compliance Testing

• Internal Controls Assessment

• Archer GRC

• Metric Stream

• Power BI

• Governance Risk & Compliance (GRC)

• Compliance Testing

• Control Design Assessment

• CPA / CIA / CISA / CRISC

• Banking Operations / Internal Audit

Generic Managerial Skills, If any:

• Good command of written English & good verbal communication skills.

• Propose solution to complex questions for brainstorming and guidance from director or manager

• Willing to follow instructions in how to conduct control testing based on predefined test steps.

• Follow test documentation rules and understand that word choices, tone, and How to number workpapers can be a difference between believable conclusion and questionable conclusion from test team.

• Open mindset – Ready to ask clarifying questions and avoid repeated questions that were answered more than 2 to 3 times. (It is okay to require up to 2 to 3 reminders).

• Be clear and concise of estimated time to completion.

• Bring the best self by being active engaged and actively listen to instructions and responses to questions.