Senior Analyst Technology Risk

Any specific tools/skillset:

• Experience of at least 5 to 8 years within the field of technology risk and compliance
• Excellent business writing and communication skills, with great attention to detail
• Ability to aggregate and analyze quantitative and qualitative data
• Ability to build a strong rapport with business teams and build consensus
• Ability to manage multiple competing projects and priorities under time pressure without compromising quality
• Ability to operate in an entrepreneurial environment – being a self-starter, results-oriented, and highly motivated while being effective in a fast-paced and evolving environment
• One or more of the following would be considered an asset:
• College Diploma in Risk Management and/or Computer Science
• Undergraduate Degree or Post Graduate in Computer Science, Computer Engineering or a similar field
• Accreditations such as CRISC, CISSP, CRM, CISA, CDPSE

 For this role is specifically looking at someone who has led and managed a SOC2 Type 2 program
 
Role profile description:

• Drive consistency across the organization by establishing and maintaining technology risk management governance, technology risk & controls framework and technology & risk management processes 
• Assist in providing a holistic view of technology risk across the organization 
• Promote technology risk culture across the organization 
• Support the design, implementation, and testing of technology controls
• Track, receives updates and consolidates the remediation progress on all technology issues, audit findings, and policy/standard exceptions across the organization
• Support the consolidation of KRI data collected by 1B Tech Risk Generalists
• Assist in preparing reports to highlight risks and impacts for executive reporting & proactively share with Regulators, Line 2, and Internal Audit
• Contribute to the evolution of the client’s technology risk management strategy and operating model
• Provide guidance to Technology teams in the design, implementation, and continuous monitoring of controls that reduce a broad spectrum of technology operational risks
• Assist in ongoing monitoring of compliance with policies and standards and enforce compliance with policies and standards across all levels of the organization
• Support the Technology Risk & Control identification process across all of the client’s organization
• Support Line 2 in their review and challenge of 1st line risk processes
• Provide extensive subject matter expertise in key technology risk management areas such as information security, operations, IT Resiliency, and technology delivery
• Foster, advocate for and strengthen the client’s overall technology risk posture
• Build and maintain a backlog of technology risk remediation work supported by a governance lifecycle and the implementation of management tools supported by technology
• Establish, support, and streamline regulatory and related technology risk reporting and metrics (KRIs, KPIs, etc.)
• Support audit activities including ITGC testing
• Support control testing activities including coordination of SOC2 and ISO 27001 compliance testing
• Support the risk reviews of key initiatives and projects
• Support the review and challenge of exceptions to enterprise policies and standards