Director, Risk Management

Preston Lang; Mississauga; Hybrid; CAD 110,000 - 150,000; Full time

Job summary

Preston Lang is seeking an experienced risk leader to oversee risk management across a global consumer-facing business unit. You will drive risk assessments, coordinate remediation actions, and provide guidance on regulatory requirements and internal controls to business lines.

Your role centers on strengthening risk posture and supporting governance with strong written and verbal communication. The position demands extensive experience in IT risk, information security, and regulatory

Qualifications

• 10+ years in IT, information security or business continuity.
• 5+ years in risk management in financial services.
• Experience under strong regulatory oversight.
• Intermediate knowledge of internal controls and RCSA.
• Basic knowledge of processes, controls and exposure areas.
• Understanding of FFIEC, GLBA, SOX, PCI.
• Knowledge of ISO 27001, ISO 22301, COBIT, COSO, ITIL.
• Ability to analyze and prioritize risk mitigation.
• Analytical thinking and strong business writing.
• Ability to communicate with all levels of the organization.

Responsibilities

• Oversee and manage risk across the business unit.
• Lead risk assessments and remediation strategies with timelines.
• Advise on regulations, policies, and best practices for operations.
• Facilitate RCSA across technology lines with documentation.
• Advise on risk/controls for new products and strategic initiatives.
• Ensure proper control frameworks are in place for governance.

Skills

Risk management

Regulatory knowledge

Analytical thinking

Communication

Business writing

Stakeholder management

Tools

ISO 27001

COSO

COBIT

PCI

Job description

Our Client

Our client is a leading global consumer packaged goods (CPG) company, renowned for delivering some of the most recognized and trusted products in the market.

Location

Mississauga

Position

Description

You will be responsible for overseeing and managing all aspects of risk within the business unit, conducting ongoing assessments to determine whether actions are required to strengthen risk management or reduce exposure in alignment with the unit’s risk profile and tolerance levels.
Lead issue management by collaborating with business lines to develop and execute actionable plans that achieve desired outcomes within set timelines, while identifying patterns and implementing comprehensive remediation strategies.
Serve as a subject matter expert, offering day-to-day guidance to business units on the effective implementation of regulations, internal policies, and industry best practices through procedures and operational guidelines.
Conduct in-depth risk assessments and provide strategic advice on appropriate risk mitigation measures.
Facilitate risk and control self-assessments (RCSA) across technology business lines, ensuring accurate evaluation and documentation of key risks and controls.
Advise business units on risk and control considerations related to new products, processes, and strategic initiatives, supporting governance processes and ensuring proper control frameworks are in place.
Provide risk coverage across programs by enabling consistent risk identification and treatment across all relevant systems and processes.

Qualifications

• 10+ years of experience in Information Technology, Information Security (preferably in the Application Security space), and/or Business Continuity
• 5+ years of risk management experience gained from working in financial services industry, preferably in Technology Risk or Operational Risk
• Experience in an organization that is under strong regulatory oversight and scrutiny
• Intermediate knowledge of internal controls and risk self-assessment
• Basic knowledge of business area processes and/or products and operations; regulatory requirements; and key processes, controls, and exposure areas
• Understanding of FFIEC guidelines and handbooks, GLBA, SOX, PCI
• Knowledge of industry-recognized frameworks such as ISO 27001, ISO 20000, ISO 9001, ISO 31000, ISO 22301, Cobit, COSO, ITIL
• Ability to analyze and synthesize many risk data points and help the business to prioritize mitigation
• Analytical thinking skills
• Strong business writing skills
• Ability to effectively communicate with all levels of the organization

We thank you in advance for your application however only those selected for an interview will be contacted.