Information Risk Management Analyst III

Job Title: Information Risk Management Analyst III
Location: Toronto, ON
Estimated Duration: 9 Months

Description:

Summary:
The main function of an Information Risk Management Analyst is to manage IT risk through identification, evaluation, integration and documentation of risks and controls, risk analysis and research, risk program coordination, or consultation on risk mitigation plans.
Job Responsibilities:

• Serve as the Group Functions Technology contact for business continuity and operational resilience requirements.
• Empower business and technology partners to identify and manage their business continuity and operational resilience risks effectively.
• Collaborate with business and technology teams to achieve business goals while safeguarding our ability to deliver critical operations and services during disruptions.
• Coordinate and facilitate business impact assessments, business continuity tabletops and realistic simulation exercises to ensure staff can identify actions and steps to successfully respond.
• Development of strategies and plans to ensure the organization can continue running effectively in the event of an emergency.
• Work with process and technology owners to design and implement customized recovery documentation including, but not limited to, business continuity plans and relevant documents such as vendor exit plans and test/simulation reports.
• Advice on risk management and provides training and education on resilience topics.
• Assess the risks of disruption and develop strategies to reduce the impact of such an event.
• Provide advice and guidance on the leading practices for Business Continuity planning, review existing plans for their effectiveness, and make recommendations for improvements.
• Support L2 and L3 reviews of BCM program practices

Required Qualifications:

• At least 5 years of experience in Business Continuity, Operational Resilience, and Project Management from a large, complex organization.
• Strong personal computing skills (MS Office) and familiarity with BCM Planning tools and/or relational databases (e.g., Fusion Risk Management, Archer, PowerBI).
• Good understanding of Business Resilience tools and techniques.
• Good communication skills, including the ability to develop and deliver effective user education sessions and presentations to all interpersonal levels.
• Demonstrable ability to build relationships, engage, and influence others.
• Knowledge of OSFI (B10 & E21) and industry best practices is required.
• Experience developing and implementing recovery documentation including, but not limited to, business continuity plans and relevant documents such as vendor exit plans and test/simulation reports.
• Experience in facilitating and developing simulation recovery exercises
• Professional certification in BCM (ABCP, CBCP, MBCI, or MBCP) or working towards acquiring certification.

Preferred Qualifications:

• University Degree
• Financial Services industry experience
• Strong “automation-first” mindset
• Good understanding of information technology concepts such as cloud computing, computing infrastructure is a plus
• Able to work independently when needed