Business Analyst – IT

Position Title: Business Analyst – IT
Location: Toronto, ON (Hybrid)
Estimated Duration: 6 months

Story Behind the Need
Business group: IT Risk
The IT Risk Governance and oversight group supports standards, processes, methodologies for technology and cybersecurity risks.
We need an experienced Governance, Risk and Controls professional to support with the IRM ServiceNow work contracted through an external vendor. This person will help with all requirements collection, stakeholder workshops, specific settings to Technology Issues workflow, as part of Technology Governance, Risk and Oversight team. Responsible for tracking and reporting software currency remediation across all of client.
Project:
The project will implement Integrated Risk Management (IRM) for technology risk. The team requires IRM ServiceNow GRC tool.
Candidate Value Proposition:
The successful candidate will have the opportunity to work an extensive project and contribute to the steady state of the new GRC tool that is to be implemented. The successful candidate will have the opportunity to be converted to FTE depending on performance.
Typical Day in Role:

• Identify the stakeholders involved in Issue lifecycle.
• Collaborate with the vendor to ensure complete inventory of foundational elements
• Collects all data elements necessary to describe the issue.
• Develop and collect requirements through workshops
• Collaborate and influence across the organization to help build awareness and ensure common adoption of Issues Management practice across Technology to drive forward a common enterprise-wide approach.

Directly support the IT Risk Governance and Controls Director, to collaboratively:

• Collect and analyze requirements for the initial configuration of GRC tool
• Work directly with the vendor to establish what good looks like to implement the Issues Management workflow for Technology Risk issues
• help improve the Issues Management Practice, functioning as a Centre of Excellence
• contribute with requirements to the Issues Management reporting and monitoring process

Support the IT Risk Governance and Controls Director with research and industry practices on Technology Issues Management contributing with counsel and direction on strategic decisions related to enhancements, new metrics, and indicators.

Candidate Requirements/Must Have Skills:

• 10+ years of experience with risk and compliance and issues management (governance, risk and controls)
• 5+ years of experience with GRC tools, exposure to issues management lifecycle
• 5+ years of experience with JIRA/CONFLUENCE
• 3+ years of experience with project management
• 1+ years of experience with technology risk and compliance

Nice-To-Have Skills:

• Strong proficiency with PowerPoint
• SQL experience
• Dashboarding skills (PowerBI, Tableau)
• CRISC ISACA certification

Soft Skills Required:

• Strong communication and influencing capability
• Well-developed analytical competencies
• Good ability to balance competing or conflicting goals of various departments and stakeholders which requires a mature, diplomatic approach and highly developed negotiation and influencing skills.
• Good communication, facilitation and presentation skills for developing communication strategies for Executive approval through implementation of strategies and programs

Education: Bachelor’s degree
Best VS. Average Candidate:
The ideal candidate would have strong experience with technology risk management. The manager is not looking for credit risk experience, but rather technology related risk management.