Description:
Technology redefines the way we work and deliver to meet business needs and elevate the customer experience. You’ll be part of an organization that is embracing modern technology, innovation and agile ways of working.
Our Canada Technology team is a strategic partner in our business – with an ambition to be a forward-thinking, agile technology organization delivering secure, resilient and leading solutions that support Canada Life and the well-being of millions of Canadians.
We are looking for a Technology Risk Analyst to join our team.
What You Will Do
- Drive consistency across the organization by establishing and maintaining technology risk management governance, technology risk & controls framework and technology & risk management processes
- Assist in providing a holistic view of technology risk across the organization
- Promote technology risk culture across the organization
- Support the design, implementation, and testing of technology controls
- Track, receives updates and consolidates the remediation progress on all technology issues, audit findings, and policy/standard exceptions
- Support the consolidation of KRI data collected by 1B Tech Risk Generalists
- Assist in preparing reports to highlight risks and impacts for executive reporting & proactively share with Regulators, Line 2, and Internal Audit
- Contribute to the evolution of Canada Life’s technology risk management strategy and operating model
- Provide guidance to Technology teams in the design, implementation, and continuous monitoring of controls that reduce a broad spectrum of technology operational risks
- Assist in ongoing monitoring of compliance with policies and standards and enforce compliance with policies and standards
- Support the Technology Risk & Control identification process across all of Canada Life organization
- Support Line 2 in their review and challenge of 1st line risk processes
- Provide extensive subject matter expertise in key technology risk management areas such as information security, operations, IT Resiliency, and technology delivery
- Foster, advocate for and strengthen Canada Life’s overall technology risk posture
- Build and maintain a backlog of technology risk remediation work supported by a governance lifecycle and the implementation of management tools supported by technology
- Establish, support, and streamline regulatory and related technology risk reporting and metrics (KRIs, KPIs, etc.)
- Support audit activities including ITGC testing
- Support control testing activities including coordination of SOC2 and ISO 27001 compliance testing
- Support the risk reviews of key initiatives and projects
- Support the review and challenge of exceptions to enterprise policies and standards
What You Will Bring
- Experience within the field of technology risk and compliance
- Excellent business writing and communication skills, with great attention to detail
- Ability to aggregate and analyze quantitative and qualitative data
- Ability to build a strong rapport with business teams and build consensus
- Ability to manage multiple competing projects and priorities under time pressure without compromising quality
- Ability to operate in an entrepreneurial environment - being a self-starter, results-oriented, and highly motivated while being effective in a fast-paced and evolving environment
- One or more of the following would be considered an asset:
- College Diploma in Risk Management and/or Computer Science
- Undergraduate Degree or Post Graduate in Computer Science, Computer Engineering or a similar field
- Accreditations such as CRISC, CISSP, CRM, CISA, CDPSE