Job Specifications
We are looking for Director of IT Risk Management (contract), responsible for directing and implementing the organization's technology risk management strategy.
Current work authorization for Canada is required.
Must have experience and skills as follows:
- 7+ years of related experience.
- University Degree or equivalent work experience.
- Experience in risk management, audit and risk programs.
- Professional designation or certificate in audit, risk management or internal control (e.g. ISACA)
- Advanced knowledge and expertise in technology-risk disciplines.
- Ability to identify, oversee, and mitigate compliance and operational risks in line with the internal standards.
- Management of vendors
- A strong ability to communicate (written and verbal).
- A strong sense of accountability and taking initiative to drive projects to completion.
- Emphasis on risk and audit.
- An inquiring mind.
- Knowledge and understanding of clearing firm regulatory obligations, Canadian brokerage industry and brokerage operations, including the impact of technology on this market.
- Experience managing projects and scaling processes with company growth
- Ability to collaborate and influence across all levels of the organization.
- Effective presentation skills.
- Strong influencing skills. Gains acceptance of ideas and suggestions from business partners.
- Ability to plan, monitor, control projects, ensuring efficient utilization of technical and administrative resources, to achieve project objectives.
You must bring experience to be able to:
- Collaborate with various stakeholders across Canada to develop and maintain a comprehensive view of the technology risk posture including but not limited to the Business continuity function and its impact on the business.
- Provide subject matter expertise and technical guidance to technology aligned process owners.
- Ensure that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.
- Consult with senior business management to ensure technology assessments are aligned and inform business operational risk assessments in a meaningful, actionable manner.
- Work within the Cyber Security Technology & Controls, Tech Risk & Controls Frameworks Team, in partnership with stakeholders from across Global Technology, you will lead the global programs to accurately represent and maintain the firm’s complex technology operations.
- Innovate and provide analysis and thought leadership to drive improvement and enhancement to the Firms’ Operational Risk framework, platform and improve the End to-End Technology Risk Management lifecycle.
- Drive and lead change initiatives across the organization’s Risk Organization (both Technology and Business) to improve the understanding of technology risk.
- Establish a proactive and collaborative framework that ensures personal data of all parties (customers, employees and all other individuals’) data subjects is Identified and adequately protected.
- Collaborate with functional owners to document existing data protection controls, identify potential gaps and enhancements and follow-through on the completion of agreed upon changes.
- Focus on identifying Personal Data book of records systems and assess data protection controls in place, establishing action plans to address any potential gaps.
- Establish formal DPO review and attestation processes on existing controls.
- Build organization awareness on key data protection requirements.
- Promote collaboration between all the groups that own data protection controls in their respective areas.
- Establish and Conduct Privacy Impact Assessment for Fidelity Canada projects, systems and business process enhancements.
- Contribute to the development and execution of BCP plan and strategies.
- Support the business during actual BCP events, including logistical planning, event coordination, communication, and supporting business resumption.
- Partner with IS teams to review and develop business recovery requirements and strategies.
- Ensure appropriate testing including test preparation, postmortem analysis and test issues are documented, investigated, resolved, or corrective actions will be applied when possible.
- Chair change management meetings, maintaining logs of all changes, risk ratings, approvals, and closure activities.
- Represent change management program.
- Maintain the ServiceNow Configuration database ensuring that all applications and processes are subject to change management and owners/approvers are up to date.
- Meet regularly with employees to provide timely feedback, support and coaching to foster indi
About the Company
At IntellEcomm Management Consultants, we help our clients turn strategy into results with expert guidance, strong governance, and flawless delivery. With over 30 years of hands-on experience across banking, capital markets, insurance, pensions, wealth management, etc. our team has led transformations for organizations such as BMO, TD, CIBC, CPPIB, AIMCO, Guardian Capital, Scotiabank, Fidelity Investments Canada, and more. We partner with clients to deliver cost reduction, risk governance, digital modernization, and intellig...
Know more