Senior Manager, IT and Cyber Risk and Control

We’re looking for our next Senior Manager IT and Cyber Risk and Control. Could It Be You?

The purpose of the Senior Manager IT and Cyber Risk and Control is responsible for leading activities related to the IT and Cyber Risk and Control program. This role is vital to supporting the development, implementation, monitoring and reporting mechanisms that highlight and manage risk exposure and opportunities for effective control of technology and business risks arising from the use of technology, including from use of technology service providers. The Senior Manager, IT and Cyber, Risk and Control is expected to work collaboratively with other areas across enterprise IT, Cyber Security and Security Operations. As a focal point for IT and Cyber, Risk and Control you support the Head of IT and Cyber for Banking and Mortgage Operations in the collection, preparation and presentation of material related to IT and Cyber risk to various Committees and the Board.
 

What’s it like working as a Senior Manager IT and Cyber Risk and Control at Questrade?

Leads the IT and Cyber Risk and Control team.

Leads the implementation and operation of the IT and Cyber framework, tools, processes and methodologies.

Develops reports, dashboards and presentations on IT and Cyber Risk and Control for oversight and management committees ensuring documents are accurate and timely to facilitate informed decision making.

Leads the development, collection, analysis and aggregation of IT and Cyber performance and risk metrics.

Leads the review of third parties and their programs for management of IT and Cyber risk to assess potential impacts on the company.

Leads the development, review or revision of policies, standards and procedures for IT and Cyber Risk Management.

Develops, implements or coordinates execution of a diverse set of Risk and Control Assessments and maintains the IT and Cyber Risk Register.

Maintains subject matter knowledge and awareness of legislative, legal and statutory changes relating to information technology, cybersecurity and data protection.

Lead the coordination, completion and response to internal / external audits and regulatory examinations of Information Technology and Cybersecurity.

Collaborates cross-functionally with other areas of enterprise risk and control to understand and share current and emerging risk.

Need more details? Keep reading…

Knowledge & Skills

• 10+ years of experience in information technology Internal Audit, Risk Management and/or Compliance in a financial institution.

• 5+ years of hands-on information technology or security operations experience.

• Holds one or combination of CISA, CRISC, CISSP, GGEIT or equivalent.

• Knowledge and experience working with data, cybersecurity, information security, compliance and privacy laws in Canadian financial industry.

• Experience writing or updating IT and Security governance documents, policies and standards.

• Experience building key performance and risk indicator dashboards for different management levels.

• Experience with preparation and/or review of SOC-1 and SOC-2 reports.

• Knowledge of a broad set of industry best practices (COBIT, ITIL, NIST CSF, Cloud CSC, Agile SAFE, PCI-DSS, etc.)

• Exposure to enterprise and operational risk principles and practices.

• Strong leadership capability, executing as appropriate in the areas of responsibility.

• Expertise in budget planning, financial management and workforce management.

• Broad knowledge of current and emerging technologies, technology directions, and strategic application to business needs, including the ability to differentiate between a relevant trend and hype.

• Ability to improve operational efficiency, service delivery and information management across the IT organization and wider enterprise.

• Excellent oral and written communication skills, including the ability to explain technology solutions in business terms, establish rapport and persuade others.

So are YOU our next Senior Manager IT and Cyber Risk and Control? You are, if you have…

Key Competencies

• Building Relationships - Maintains and forms alliances with recognized experts and with decision makers. Draws on a wide base of relationships inside and outside the work environment.

• Business Enterprise Knowledge - Has strong business acumen and business planning skills. Solicits information on enterprise direction, goals and industry. 

• Results Orientation - Sets and accomplishes challenging goals. Defines standards in terms of doing what is appropriate and doing it well. Competes resourcefully, and takes calculated risks to achieve results.

• Team Leadership - Develops, directs, coaches, mentors and reinforces team members in line with the mission, vision, values, goals and performance standards of formal and informal teams.

#LI-JW1 #LI-Hybrid

Sounds like you? Click below to apply!