Director, IT & Operational Resiliency

MCAN Financial Group; Toronto; Hybrid; CAD 150,000 - 190,000; Full time

Job summary

MCAN Financial Group is seeking a Director, IT & Operational Resiliency to lead technology risk, cybersecurity risk, and operational resilience programs. You will oversee cyber risk controls, business continuity, disaster recovery and third‑party risk, ensuring alignment with regulatory expectations and risk appetite.

You will guide the development of risk frameworks, report to senior leadership, and collaborate across the Risk team to strengthen resilience and governance.

Qualifications

• Experience in technology risk, cyber risk and operational resilience.
• Knowledge of business continuity, disaster recovery and third‑party risk management.
• Leadership experience and ability to guide risk governance.

Responsibilities

• Provide oversight of technology and cybersecurity risks across systems and data.
• Monitor resilience, perform DR testing, and validate RTO/RPO effectiveness.
• Evaluate cyber resilience, incident response, and recovery plans.
• Ensure OSFI-related technology, cyber, and third‑party risk compliance.
• Develop and enhance the Operational Risk Management & Resiliency Framework.
• Map critical operations, dependencies, and ownership across teams.
• Lead resilience scenario testing and assess disruption tolerance.
• Oversee business continuity and crisis management programs.
• Maintain risk programs: RCSAs, KRIs, due diligence, monitoring.
• Report risk insights to senior management and the board.

Skills

Technology risk

Cybersecurity risk

Operational risk

Operational resilience

Business continuity

Third-party risk management

Job description

At MCAN, our greatest pride is the incredible team we’ve built and the experience we create for every team member. Our people aren’t just professionals; they’re innovators, influencers, and bold thinkers who challenge the status quo. We don’t operate like traditional lenders because our focus isn’t on selling mortgages; it’s on building lasting relationships.

#MCANLIFE is more than a hashtag; it’s our culture. It’s rooted in customer-centricity and fueled by genuine collaboration. Here, talented professionals find a workplace that feels connected, empowering, and full of opportunity to use their skills to the fullest. At MCAN, you’ll discover a career where you can connect, grow, and truly make an impact.

We are proud to be recognized as one of Canada’s Best Workplaces™ year after year. Building on our Great Place to Work® certification since 2021, we’ve continued to earn national recognition for creating an exceptional employee experience. In 2024 and 2025, we were celebrated as one of Canada’s Best Workplaces™, including being named among the Best Workplaces™ for Women and Best Workplaces™ in Financial Services & Insurance. Most recently, we were honored as one of Canada’s Top Small and Medium Employers and recognized for having one of Canada’s Most Admired™ Corporate Cultures, a testament to our commitment to fostering a culture where people feel valued, connected, and empowered to grow.

We’re looking for a Director, IT & Operational Resiliency to join our Risk team.

Job Summary

Reporting to the SVP & Chief Risk Officer, the Director, Technology & Operational Resiliency is responsible for the oversight, development and continuous enhancement of the organization’s technology risk, cybersecurity risk, operational resilience and third‑party risk management programs. The role provides independent challenge and oversight of technology, cybersecurity, business continuity, disaster recovery and critical third‑party risks, ensuring alignment with regulatory expectations, risk appetite and strategic objectives.

Key Responsibilities

• Provide independent oversight and challenge of technology and cybersecurity risks, including material systems, infrastructure, cloud services, data, architecture and critical technology dependencies.
• Monitor technology resilience and recovery capabilities, including disaster recovery testing, RTO/RPO performance, backup and restoration, and recoverability of critical systems.
• Challenge the adequacy of cyber resilience, incident response, recovery planning and remediation for material services and critical operations.
• Oversee implementation and ongoing compliance with OSFI expectations related to technology risk, cybersecurity risk, operational resilience and third‑party risk management.
• Lead the continued development and enhancement of the Operational Risk Management & Resiliency Framework and related oversight practices.
• Coordinate the identification, mapping and maintenance of critical operations and their supporting people, processes, technology, data and third‑party dependencies.
• Lead operational resilience scenario testing and assess the organization’s ability to remain within approved disruption tolerances.
• Oversee business continuity, disaster recovery and crisis management programs, including testing, lessons learned and remediation activities.
• Maintain and enhance operational risk and third‑party risk programs, including RCSAs, process inventories, operational risk events, KRIs, due diligence, ongoing monitoring and contingency planning.
• Report to Senior Management, and Board and Board Committees (ad‑hoc basis) on operational, technology, cyber and third‑party risks, and translate complex issues into clear, actionable business insights.

Preferred Qualifications

• 7+ years of experience in technology risk, cybersecurity risk, operational risk, operational resilience, business continuity, third‑party risk management or a related discipline.
• Big 4 consulting Experience is preferred.
• Experience within a federally regulated financial institution or other regulated industry.
• Strong knowledge of OSFI Guidelines E-21, B-13 and B-10.
• Demonstrated leadership and people management experience.

Candidate Backgrounds of Interest

• Cyber Risk
• IT Audit
• Operational Risk
• Business Continuity / Operational Resilience
• Third‑Party Risk Management

This posting is intended to attract candidates with strong technology and cybersecurity risk fluency, combined with operational resilience and governance experience.

We are dedicated to building an organization that reflects the diversity of our clients and the communities we serve across Canada. Do you possess and value the same attributes? Are you interested in your own development? Then come join our team!

We confirm that our recruitment process incorporates Artificial Intelligence (AI) in a variety of ways. While technology helps us enhance efficiency and support our hiring efforts, every stage continues to be guided by our recruitment team to ensure thoughtful and fair decision making. The human element remains central throughout our process.

Regular in‑office collaboration is an important part of how we work, learn, and succeed together, and we believe great work thrives through in‑person connection. Our hybrid model is designed to bring teams together in a modern office environment where collaboration, mentorship, and creativity naturally flourish, while still providing flexibility for focused remote work. While schedules may vary by team and role, successful candidates should expect a consistent in‑office presence as part of our hybrid approach.

MCAN is committed to providing accommodation to applicants throughout the job application and interview process to the point of undue hardship. If you require any accommodations, please contact our Human Resources team at [e-mail]. Requests for accommodation can be made at any stage in the recruitment process.

We thank all applicants for their interest but only those selected for further consideration will be contacted.