Manager, Technology Risk & Governance

Manager, Technology Risk & Governance
Full Time Permanent
Toronto (Hybrid)
Client: Canadian Tire
About Us
Canadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With more than 90 Owned Brands, 1,700 retail locations, financial services, exemplary e-commerce capabilities, and exciting market-leading merchandising strategies. We dream big and work as one to innovate with purpose for our customers at every level of our business, investing in new technologies and products, and doubling down on top talent to drive the company forward. We offer competitive salaries and wages to CTC employees, as well as store discounts, supported learning through our Triangle Learning Academy, Canadian Tire Profit Sharing, and retirement and savings programs for eligible employees. As part of our enhanced flex benefits program, we offer mental health benefits in the amount of $5,000 per year for benefits-eligible employees and their families, including total well-being, and mental health tools and resources for all employees. Join us in helping to make life in Canada better through living and working our Core Values: we are innovators and entrepreneurs at our core, outcomes drive us, inclusion is a must, we are stronger together and we take personal responsibility. It is an especially exciting time to join CTC and its family of companies where career opportunities are wide-ranging! Join us, where there’s a place for you here.

What You’ll Do
The Manager, Technology Risk & Governance will be responsible for identifying, assessing, and mitigating risks associated with the organization’s information technology systems and processes through assisting with the development, implementation, and management of technology governance frameworks and processes. This role requires a strategic thinker who can collaborate with various departments to ensure compliance and manage risks while promoting a culture of continuous improvement and innovation. This role has primary accountability for ITGC definition and how controls are embedded into our processes as well as ensuring Technology teams follow best practice for audits and attestations. 

The successful candidate will interact with internal and external teams and requires strong organizational and communications skills to ensure continued compliance and to provide executive level briefings on matters related to Technology risk and governance.  

Responsibilities

• Collaborate with stakeholders to conduct regular risk reviews to identify, evaluate and mitigate Technology risks to ensure continual alignment and compliance with organizational frameworks, legislative / regulatory requirements (e.g., PIPEDA, PCI-DSS) and industry standards (e.g. ISO 27001, NIST).
• Maintain risk register to ensure Technology risks are up to date and that risk mitigation plans are current and on track.  
• Assist in the development, implementation and maintenance of the organization’s Technology governance framework, checklists, policies and procedures as required to support team and corporate objectives.
• Act as a liaison to external auditors for IT General Controls (ITGCs) and ensure alignment of all Technology practices with IT General Controls (ITGCs).
• Work with our Internal Audit and Enterprise Risk teams to keep our Technology governance practices in alignment with corporate policy and standards.
• Assist in the preparation of risk materials and reports to senior management and stakeholders for monitoring purposes.
• Participate in third-party risk assessments and vendor due diligence.
• Support incident response and disaster recovery planning and testing.
• Continuously improve Technology governance practices by researching industry innovations, monitoring for emerging threats and providing employee training.

What you bring 

• Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field
• Proven experience (5+ years) in Technology Governance/Information Risk management experience, or compliance roles.
• Strong understanding of Technology governance principles and best practices.
• Knowledge of risk, security and AI frameworks (e.g. ISO 27001, COBIT, NIST)
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• High level of independence and can be relied upon to follow work through to completion
• Proven ability to manage multiple tasks simultaneously, take initiative, exercise sound judgement, and anticipate needs 

Our Commitment to Diversity, Inclusion and Belonging 
We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.
 
Accommodations  
We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.