Senior Manager, IT Risk & Governance Oversight
Mississauga, ON, Canada Req #2634 Friday, June 7, 2024 Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure.
We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence.
You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of.
This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits.
If you share the same sense of infinite possibility, come shape your future at Questrade.
We’re looking for our next Senior Manager, IT Risk & Governance Oversight. Could it be you?
Community Trust Company (CTC) is a member of the Questrade Group of Companies (QFG), which currently includes Questrade Inc.
QuestEnterprise, Questrade Wealth Management Inc., CTC, Think!nsure Ltd., and Zolo Ventures Ltd.
What’s in it for you as an employee of QFG?
Health & wellbeing resources and programs
Paid vacation, personal, and sick days for work-life balance
Competitive compensation and benefits packages
Hybrid and flexible work arrangements
Career growth and development opportunities
Opportunities to contribute to community causes
Work with diverse team members in an inclusive and collaborative environment
What’s it like working as a Senior Manager, IT Risk & Governance Oversight at Community Trust Company?
Reporting to the Chief Risk Officer, the Senior Manager - IT Risk & Governance Oversight will play a key role in monitoring the management of IT and Cyber related risks.
The responsibilities include working with the IT and Cybersecurity service providers, teams across the three lines of defence, and other stakeholders to design, implement and maintain an IT Risk Management Framework and associated processes that are aligned with CTC’s Enterprise Risk Management Framework and enterprise goals, and are conducive to the IT services management arrangements in place.
The incumbent will assess IT controls, provide effective challenges to the first line activities, report regularly on quality performance and provide recommendations to enhance the overall security and resilience of the company's IT & Cyber Security posture.
While the successful candidate will operate as part of the Risk Management team, they will also be the subject matter expert on all IT & cyber areas and will be required to collaborate and provide guidance on the areas to the internal and external stakeholders, and service providers, when needed.
Need more details? Keep reading...
In this role, responsibilities include but are not limited to :
Develop and maintain IT and cyber risk management policies, procedures, and guidelines to ensure compliance with industry standards and regulatory frameworks.
Collaborate with cross-functional teams to assess and evaluate IT and cyber controls, identify potential vulnerabilities, and recommend appropriate risk mitigation measures.
Conduct periodic risk assessments and gap analyses to identify areas of technology risk exposure, such as cybersecurity threats, data breaches, system vulnerabilities, and compliance issues.
Evaluate and manage third-party vendors and service providers to ensure they meet the institution's security requirements and standards.
Monitor and review IT and cyber risk indicators, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to identify emerging risks and provide timely challenge to the first line and reporting to senior management.
Review, report and provide effective challenges to the status and performance of IT services and first line reporting.
Collect, analyze and aggregate IT and cyber performance and risk metrics for reporting and internal control validation and attestation.
Develop dashboards and other visualizations to present IT and cyber risk in various aspects of the business.
Collaborate with other risk teams to provide IT and cyber risk evaluation and management support in their respective processes, such as due diligence process while onboarding a vendor etc.
Stay up-to-date with industry best practices, regulatory requirements, and emerging trends in IT risk management to ensure the organization's risk mitigation strategies are effective and in line with industry standards.
Collaborate with internal audit and other teams to support IT audits and regulatory findings, and regulatory compliance assessments, providing expertise on IT risk-related matters.
Develop and deliver training programs and awareness campaigns to enhance the organization's IT risk management culture among employees.
Assist in incident response and investigation activities related to IT risk incidents, ensuring appropriate actions are taken to prevent reoccurrence.
Build and maintain effective relationships with key stakeholders, including IT teams, first and second line business units, and external partners, to promote a collaborative approach to IT risk management.
So are YOU our next Senior Manager, IT Risk & Governance Oversight? You are if
A university / college degree in information technology, information security or related fields
Minimum 5-8 years of experience in a similar role, preferably within the financial services industry
Holds industry recognized certifications such as CRISC, CISA, CISM, CISSP, ISO 27K, or actively working towards them
Experience in conducting maturity assessments, control assessments and control testing
Experience and a good understanding of regulations related to card payments, such as PCI-DSS (good to have)
Understanding of a broad set of industry best practices (COBIT, ITIL, NIST, ISO)
Experience in working with an OSFI regulated entity
Understanding of applicable Canadian regulations
Proficient in data protection controls
Strong understanding of identity and access management systems and controls
Good written, oral and interpersonal communication skills and keen attention to detail
LI-PD1 #LI-hybrid
At Questrade Financial Group of Companies, with multiple office locations around the world, we are committed to fostering a diverse, inclusive and accessible work environment.
This is an environment where individuals are treated with dignity and respect. Here, the unique skills and experience you bring will be valued.
You will be supported and motivated, so that you can harness your unlimited potential. Our team reflects the diversity of the communities we serve and operate in.
Having a collaborative and diverse team helps us push boundaries to bring the future of fintech into existence not only for the benefit of our customers, but for those who build their career with us.
Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment / selection process, please let us know and we will work with you to meet your needs.
Other details
- Pay Type Salary
Senior Manager - Third Party Risk Management
This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our AccessAbility Action Plan , Reconciliation A...
Senior Manager, IT Infrastructure and Security
The Senior Manager, IT Infrastructure and Security - Global will play a critical role in ensuring the stability, security, and scalability of the infrastructure and security environment for the organization, while providing technical leadership, people management, and strategic guidance to a global ...
Senior Manager - Third Party Risk Management
This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our AccessAbility Action Plan, Reconciliation Ac...
Manager/Senior Manager, Quantitative Market Risk Models - Financial Engineering and Modeling
This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our. The salary range for the Manager position i...
Technology Risk - Senior Manager - Toronto
Associated with these opportunities come risks, our clients seek independent advice and assurance over diverse issues which include for example: the design and operation of their internal controls, the security of their business critical systems, the delivery of major IT enabled programmes, their re...
Senior Director, Internal Audit, Global Cybersecurity & IT Risk Management
As a Senior Director, Internal Audit, Global Cybersecurity & IT Risk Management, you will evaluate organizational business risks, develop and communicate audit plan, manage and execute audits, and recommend improvements to internal controls and operating processes. Maintain relationships with ext...
Senior Manager, Model Risk Audit
Assists in the development and execution of a comprehensive and strategic audit plan to ensure auditable entities remain within cycle and conducts ongoing monitoring activities to stay abreast of changes / emerging risks / themes or systemic issues that may impact the risk assessment of the audit un...
Manager, Liquidity & Funding Risk Oversight
Reviews new business initiatives and monitors existing initiatives to identify potential risk situations/ impacts; makes recommendations or escalates to the manager, as per guidelines. Develops and monitors the market risk management framework that includes the governance framework and practices lev...
Senior IT Manager, Data Info Management
Build strong relationship with ITS, Architecture, TRMIS and work in partnership to develop leading edge technology solutions with a special focus in the Big Data space. Interface with technology teams supporting AML, Marketing, Fraud, Risk, Security and Compliance looking for opportunities to share/...
Senior Consultant - Governance, Risk and Compliance Services (Consumer Markets & Technology)
Chartered Professional Accountant with designation / Chartered Professional Accountant Student OR Certified Internal Auditor with designation / Certified Internal Auditor Student. Delivering high quality work that is on time and in compliance with the Firm's quality standards. For more information a...