Senior Manager, IT Risk & Governance Oversight
Mississauga, ON, Canada Req #2634 Friday, June 7, 2024 Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure.
We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence.
You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of.
This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits.
If you share the same sense of infinite possibility, come shape your future at Questrade.
We’re looking for our next Senior Manager, IT Risk & Governance Oversight. Could it be you?
Community Trust Company (CTC) is a member of the Questrade Group of Companies (QFG), which currently includes Questrade Inc.
QuestEnterprise, Questrade Wealth Management Inc., CTC, Think!nsure Ltd., and Zolo Ventures Ltd.
What’s in it for you as an employee of QFG?
Health & wellbeing resources and programs
Paid vacation, personal, and sick days for work-life balance
Competitive compensation and benefits packages
Hybrid and flexible work arrangements
Career growth and development opportunities
Opportunities to contribute to community causes
Work with diverse team members in an inclusive and collaborative environment
What’s it like working as a Senior Manager, IT Risk & Governance Oversight at Community Trust Company?
Reporting to the Chief Risk Officer, the Senior Manager - IT Risk & Governance Oversight will play a key role in monitoring the management of IT and Cyber related risks.
The responsibilities include working with the IT and Cybersecurity service providers, teams across the three lines of defence, and other stakeholders to design, implement and maintain an IT Risk Management Framework and associated processes that are aligned with CTC’s Enterprise Risk Management Framework and enterprise goals, and are conducive to the IT services management arrangements in place.
The incumbent will assess IT controls, provide effective challenges to the first line activities, report regularly on quality performance and provide recommendations to enhance the overall security and resilience of the company's IT & Cyber Security posture.
While the successful candidate will operate as part of the Risk Management team, they will also be the subject matter expert on all IT & cyber areas and will be required to collaborate and provide guidance on the areas to the internal and external stakeholders, and service providers, when needed.
Need more details? Keep reading...
In this role, responsibilities include but are not limited to :
Develop and maintain IT and cyber risk management policies, procedures, and guidelines to ensure compliance with industry standards and regulatory frameworks.
Collaborate with cross-functional teams to assess and evaluate IT and cyber controls, identify potential vulnerabilities, and recommend appropriate risk mitigation measures.
Conduct periodic risk assessments and gap analyses to identify areas of technology risk exposure, such as cybersecurity threats, data breaches, system vulnerabilities, and compliance issues.
Evaluate and manage third-party vendors and service providers to ensure they meet the institution's security requirements and standards.
Monitor and review IT and cyber risk indicators, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to identify emerging risks and provide timely challenge to the first line and reporting to senior management.
Review, report and provide effective challenges to the status and performance of IT services and first line reporting.
Collect, analyze and aggregate IT and cyber performance and risk metrics for reporting and internal control validation and attestation.
Develop dashboards and other visualizations to present IT and cyber risk in various aspects of the business.
Collaborate with other risk teams to provide IT and cyber risk evaluation and management support in their respective processes, such as due diligence process while onboarding a vendor etc.
Stay up-to-date with industry best practices, regulatory requirements, and emerging trends in IT risk management to ensure the organization's risk mitigation strategies are effective and in line with industry standards.
Collaborate with internal audit and other teams to support IT audits and regulatory findings, and regulatory compliance assessments, providing expertise on IT risk-related matters.
Develop and deliver training programs and awareness campaigns to enhance the organization's IT risk management culture among employees.
Assist in incident response and investigation activities related to IT risk incidents, ensuring appropriate actions are taken to prevent reoccurrence.
Build and maintain effective relationships with key stakeholders, including IT teams, first and second line business units, and external partners, to promote a collaborative approach to IT risk management.
So are YOU our next Senior Manager, IT Risk & Governance Oversight? You are if
A university / college degree in information technology, information security or related fields
Minimum 5-8 years of experience in a similar role, preferably within the financial services industry
Holds industry recognized certifications such as CRISC, CISA, CISM, CISSP, ISO 27K, or actively working towards them
Experience in conducting maturity assessments, control assessments and control testing
Experience and a good understanding of regulations related to card payments, such as PCI-DSS (good to have)
Understanding of a broad set of industry best practices (COBIT, ITIL, NIST, ISO)
Experience in working with an OSFI regulated entity
Understanding of applicable Canadian regulations
Proficient in data protection controls
Strong understanding of identity and access management systems and controls
Good written, oral and interpersonal communication skills and keen attention to detail
LI-PD1 #LI-hybrid
At Questrade Financial Group of Companies, with multiple office locations around the world, we are committed to fostering a diverse, inclusive and accessible work environment.
This is an environment where individuals are treated with dignity and respect. Here, the unique skills and experience you bring will be valued.
You will be supported and motivated, so that you can harness your unlimited potential. Our team reflects the diversity of the communities we serve and operate in.
Having a collaborative and diverse team helps us push boundaries to bring the future of fintech into existence not only for the benefit of our customers, but for those who build their career with us.
Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment / selection process, please let us know and we will work with you to meet your needs.
Other details
- Pay Type Salary
Senior Manager, IT & Operational Risk Management, Regulatory Liaison
Application Security, Critical Thinking, Cyber Security Management, Decision Making, Detail-Oriented, Information Security, Information Security Management, Information Technology (IT) Risk, Information Technology (IT) Risk Management, Information Technology Security, Internal Auditing, Interpersona...
Senior Manager In Business Risk
Highly skilled in risk analysis, compliance monitoring & remediation and strong collaboration with internal and external stakeholders to achieve risk management objectives. Responsible to drive and execute an end-to-end strategy fostering risk awareness and risk culture in the First Line of Defense ...
Senior Manager, Regulatory Operations, Controls Governance & Reporting Controls
Align day-to-day activities with the Bank’s risk culture, risk appetite statement, and limits. Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions. Creates an environment in which their team pursues effective and efficient operations o...
Senior Communications Manager to provide strategic oversight to the communications teams for a large banking client - 53050
Senior Communications Manager to provide strategic oversight to the communications teams for a large banking client. Draft and edit a variety of content, including remarks and scripts for senior leaders, newsletters, business updates, PowerPoint presentations, and thought leadership. Experience writ...
Transformation Risk and Advisory Senior Manager
A career in our Transformation Risk and Advisory (TR&A) team, within our Risk Assurance practice, will provide you with the opportunity to work on some of the largest transformation programs (e. Assess Benefits Realization on the program and perform reviews around program's ability to achieve its be...
Manager/Senior Manager, Quantitative Market Risk Models - Financial Engineering and Modeling
This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our. The salary range for the Manager position i...
Senior Audit Manager, Emerging Risk & Cyber Security
As a Senior Audit Manager, you will support the Director, Emerging Risk & Cyber Security Audit by planning and executing risk-based technical audits, across Cyber Security, Technology Infrastructure, Cloud and Digital Banking (web and mobile applications), to provide opinions on the effectiveness of...
Senior IT Project Manager
Senior IT Project Manager at SG Tech 🌟. Proven ability to learn business processes quickly and to work well with business partners at different levels within the organization. Extensive practical experience and knowledge with techniques for planning, organizing, and monitoring multiple IT projects s...
Senior Director, Internal Audit, Global Cybersecurity & IT Risk Management
As a Senior Director, Internal Audit, Global Cybersecurity & IT Risk Management, you will evaluate organizational business risks, develop and communicate audit plan, manage and execute audits, and recommend improvements to internal controls and operating processes. Maintain relationships with ext...
Intermediate Operational Incident Manager - contract governance support for all HR material and high-risk contracts-80935-1
Line of Business: CONTRACT GOVNCE & OVERSIGHT -HR SERVICES & OPERATIONS - Provide comprehensive contract governance support for all HR material and high-risk contracts as well as shared governance support for all HR medium and low-risk contracts. Shared governance support includes oversight for all ...