Risk Specialist

Job Title: Security Specialist V

Duration: 6 month (Possibility of Extension/Conversion)

Location: Toronto, ON (Hybrid – currently 2 days but will be going in 4 days eventually!)

Degree/Level of Education: University degree or relevant field / equivalent experience.

Certifications Required: CRISC / CISM / CISA and/or equivalent experience

Years of Overall Experience: 10 years

Preferred/Ideal Candidate Background: IT Audit and GRC, very strong comms written and verbal

Must-Have Hard Skills:

1.) Very strong comms – written and verbal- key

2. 10+ years as an IT Risk Specialist with relevant experience in governance, risk and compliance management within regulated industries.

3.) Professional audit, risk, information security or technology control certification preferred (e.g., CISA, CRISC, CIA or equivalent), with practical experience performing assurance, validation or quality assurance reviews of audit/regulatory findings.

4) Formal training or demonstrated competency in audit testing techniques, evidence evaluation, issue remediation validation, root cause analysis and control operating effectiveness assessment.

SOFT SKILLS:

1.) attention to detail

NICE-TO-HAVE

1. 6sigma

2.) CISSP certification or equivalent experience a plus. – nice to have

3. AI security/Risk experience/tools

4.) Service-now

• Department OverviewBuilding a World-Class, Diverse and Inclusive Technology Team at Client
• We can't afford to be boring. Neither can you. The scale and scope of what Client does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open-minded in the way we think about technology. Client’s technology and business teams become more intertwined as new opportunities present themselves. This new era in banking does not equal boring. Not at Client, anyway.
• Client Global Security & Defense is home to a team of highly valued professionals, who support all Global Technology Solutions related Regulatory and support interactions, which includes business, 2nd, or 3rd LOD led exams. They provide oversight and governance, independently challenging High / Med severity issues tied to Regulatory, Audit and ORM. Includes issue escalations tied to potential overdue and validation failures, issue support for insight, governance reporting and exams. Also, provides demand management support assurance functions.
• There's room to grow in all of it.

Job Specific Accountabilities

We are looking for someone who is well-versed at providing governance, risk, compliance and issue remediation oversight and control best practices that meet Client’s overarching Global Technology Solutions strategy and objectives. The individual will be responsible for partnering with Technology segments to support independent challenge and oversight of issue remediation plans impacting our information security control environment. Here's some of what you may be asked to perform:

• Lead assessments of audit and regulatory finding remediations required to mitigate risk within technology infrastructure and applications, working with stakeholders across the three lines of defense to ensure effective risk mitigation and remediation

• Provide advice and guidance to Technology segments and Technology Risk Services on various areas requiring subject matter expertise and interpretation: Audit & Assurance Standards; IT Risk Governance Control Frameworks, and GRC (Governance, Risk, and Compliance) frameworks.

• Contribute to the development of mature Governance Oversight & Control practices, through improvement of Risk Identification, Control Design and Operating Effectiveness.

• Identify emerging themes, understand trends, and provide specialized business management advice to senior management and respective teams while raising industry, external and internal, enterprise and business awareness.

• Lead continuous improvement projects, leveraging agile / lean continuous improvement practices/methods that demonstrate sustainable and leading edge solutions (e.g. Artificial Intelligence (AI), Machine Learning (ML), Power BI/Apps, Python, etc.)

Applicant Notices & Disclaimers

• For information on benefits, equal opportunity employment, and location-specific applicant notices, click here

At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.The pay rate for this position is C$85.00/hr.