Technology Risk Analyst

• Location city(s): Toronto
• Role Title: Technology Risk Analyst (CL17)
• Management Specialist: Senior (8+ years);  
• Work Allocation: 100%
• Work Style: Hybrid - 3 days per week in office
• Number of Openings: 1
• Anticipated Start Date: 4 weeks from the official offer day  
• End Date: 14 months from the start date
• Part-time or Full-time: full-time
• Potential convert to permanent: No
• Contractor to work extra time or on-call:  No
• Enhanced Reliability Status: not required
• Billable working hours: 7.5 Hrs/day

In this role, the contractor will be a strong collaborator that works closely with project team members, business partners and technical experts. Contractor will use your strong analysis and critical thinking skills to understand technology risks and control objectives; elicit, document, and communicate control designs; and partner with control owners to test control effectiveness.

What you will do:

• Lead the design, implementation, and testing of technology controls, ensuring alignment with internal standards and external frameworks (e.g., ISO 27001, ICOFR, SOC 2, SWIFT, PCI DSS)
• Identify and document current state control procedures and work with control owners to build the proposed future state by identifying control gaps, improvement opportunities, and impacts due to technology implementations, while assessing impacts to other processes/controls, stakeholders and systems.
• Lead the development of control test scripts ensuring alignment with internal standards and external frameworks and facilitate control test execution
• Support the development of control test automation scripting
• Serve as a subject matter expert across key technology control domains, including information security, IT operations, technology resiliency, and systems delivery
• Support ongoing monitoring of compliance with policies and standards, and assist in promoting and reinforcing adherence across the organization
• Contribute to the identification and assessment of technology risks and controls across the enterprise
• Evaluate the adequacy of issue remediation plans and validate control design and operating effectiveness
• Lead and facilitate stakeholder meetings, walkthroughs, workshops and reviews of deliverables.
• Develop collaborative partnerships and provide leadership across a variety of stakeholder groups, ensuring that information collected from multiple sources is critically evaluated, conflicts are resolved, information is clearly communicated at the appropriate level of detail, and requests are distinguished from the underlying business needs with the goal of driving to consensus.

Experience:

• Experience working on Information Security or Technology Risk projects is a must-have asset. These may include projects focused on delivery of solutions related to Technology Risk Management, Information Security, Identity and Access Management, Governance Risk and Compliance.
• Experience and proficiency with consolidated internal control frameworks mapped to industry frameworks such as ICOFR, NIST, IFRS17, OSFI, SOC2, ISO, CIS, SWIFT, PCI.
• Experience with ServiceNow IRM is preferred
• 5-10 years’ experience as a business process and/or systems analyst documenting the following: process maps and workflow diagrams, RACI matrices, compliance requirements, and gap analysis
• Experience with IT project methodologies, processes, and practices; experience in both waterfall and agile methodologies is an asset.

Skills:

• Excellent oral, written and interpersonal communications skills, with the ability to translate complex technical subject matter in business terms for executive audiences, succinctly and professionally. •        Strong analytical and problem-solving skills, particularly critical thinking, with a strong attention to detail.
• Customer centric approach to problem solving with the ability to collaborate, resolve conflicts, and reach consensus with others.
• Ability to work in a virtual team environment, facilitating and contributing to work across geographies and across other functional teams
• Strong organizational skills with the ability to manage multiple competing workstreams and priorities under time pressure without compromising quality.
• Ability to adapt to changing priorities.
• Ability to influence and negotiate win-win outcomes among cross-functional teams.
• Ability to grasp concepts quickly and to work independently with minimal direction.

Certifications/Education:

• University or College education in Computer Science, Computer Engineering, Management Information Systems, Commerce, Business Administration or a related field, or equivalent combination of education and experience