The ITAM Risk, Process and Operational Expert will serve as a senior subject-matter expert responsible for strengthening the organization’s IT asset management risk and control environment, operating processes, and day-to-day execution. The role requires deep, hands-on knowledge of IT asset management across hardware, software, cloud and configuration-related asset data, together with the ability to translate business, technology, regulatory and operational risks into clear, sustainable and testable controls.This individual will work independently to assess current-state practices, identify control and process gaps, design and implement control instances, define supporting procedures and evidence, establish effective metrics, and drive remediation through closure.
Location: Montreal (day 1 onboarding onsite / in-office presence required 3x/week)
Key Responsibilities:
- Act as the senior ITAM risk, process and operations subject-matter expert, providing practical guidance on asset inventory, lifecycle management, software asset management, hardware asset management, cloud assets, configuration data, ownership, reconciliation, data quality, end-of-life management and asset disposition.
- Assess ITAM risks and control gaps across the end-to-end asset lifecycle, including onboarding, classification, inventory recording, discovery, reconciliation, maintenance, transfer, retirement and disposal.
- Translate identified risks, policy requirements and operational obligations into well-designed control objectives, control requirements and control instances with clear scope, ownership, frequency, system applicability, evidence, escalation and remediation expectations.
- Design or enhance control instances so they are specific, measurable, sustainable, aligned to actual operating practices, and capable of independent testing.
- Develop and maintain operating procedures, process flows, RACI models, control narratives, evidence standards, exception-handling procedures and governance documentation.
- Lead current-state assessments and root-cause analysis; identify gaps, overlaps, unclear accountability and ineffective handoffs; recommend practical target-state solutions.
- Partner with asset owners, technology teams and process owners to implement controls and embed them into business-as-usual workflows, tooling and governance routines.
- Define key risk indicators, key control indicators, operational metrics, thresholds and management reporting to monitor asset data quality, control performance, exceptions and remediation progress.
- Review the completeness, accuracy and timeliness of IT asset and configuration data; work with accountable teams to investigate discrepancies and drive corrective action.
- Provide credible challenges to control owners and stakeholders while balancing risk reduction, operational feasibility, implementation effort and business priorities.
- Prepare concise, executive-ready materials for governance forums, risk committees, auditors, regulators and senior management.
- Support risk and control self-assessments, audits, regulatory reviews, control testing, issues management and remediation validation by providing clear documentation and defensible evidence.
- Monitor relevant ITAM industry practices, standards and technology trends, and incorporate applicable insights into the control framework and operating model.
- Independently plan and deliver multiple workstreams, manage dependencies, raise risks early and maintain momentum without requiring close supervision.
- Build trusted relationships and manage challenging interactions professionally, including situations involving conflicting priorities, resistance to change or unclear ownership.
Required Qualifications:
- +3 years of relevant experience in IT asset management, technology risk, controls, IT operations, IT service management, audit, compliance or a closely related discipline.
- In-depth, hands-on working experience in the IT asset management domain, including practical knowledge of asset lifecycle processes, inventory controls, asset and configuration data, data quality, reconciliation, ownership and exception management.
- Demonstrated ability to identify and articulate technology and operational risks, assess control design, and build control instances that directly address defined risks.
- Strong understanding of risk and control concepts, including control objectives, preventive and detective controls, manual and automated controls, control ownership, evidence, testing, issue management and remediation.
- Proven ability to develop or improve policies, standards, procedures, process flows, RACIs, control documentation and management reporting.
- Ability to operate independently, exercise sound judgment, structure ambiguous problems and deliver quality outcomes with limited direction.
- Self-starter mindset with strong ownership, follow-through, attention to detail and the ability to move from analysis to implementation.
- Strong stakeholder-management skills, including the confidence and professionalism to work effectively with difficult clients or stakeholders, challenge constructively, negotiate practical outcomes and manage conflict.
- Excellent written and verbal communication skills, with the ability to explain complex ITAM and control concepts to technical, operational, risk and executive audiences.
- Experience coordinating across multiple functions and geographies in a complex enterprise environment.
- Proficiency with standard productivity, workflow, reporting and presentation tools.
Preferred Experience:
- Experience in a large, regulated financial-services or similarly complex enterprise environment.
- Experience with enterprise ITAM, CMDB, discovery, workflow or IT service management platforms, including ServiceNow or comparable tools.
- Working knowledge of hardware asset management, software asset management, cloud asset management and configuration management practices.
- Experience supporting first-line technology risk and control programs, second-line challenge, internal audit or regulatory examinations.
- Experience designing control metrics, dashboards, governance reporting and executive-level risk summaries.
- Knowledge of industry frameworks and standards relevant to ITAM and technology controls, such as ISO/IEC 19770, ITIL, COBIT, NIST or FFIEC guidance.
- Relevant certifications such as ITIL, COBIT, CISA, CRISC, CISSP, CSAM, CHAMP, CITAM or IAITAM credentials.
- Experience leading control transformation, process redesign, operating-model enhancement or remediation programs.
