Director, Technology Risk Governance

Mackenzie Investments; Ontario; Hybrid; CAD 120,000 - 160,000; Full time

Job summary

A leading asset management firm in Canada is looking for a Director of IT Risk Governance. The successful candidate will establish governance frameworks and lead security policy development. With over 10 years in the field and a strong understanding of IT risk frameworks, this is a strategic position that fosters collaboration within the organization. The role will offer a hybrid work environment.

Benefits

Hybrid work environment

Continuous learning opportunities

Wellness resources

Qualifications

• 10+ years of experience in technology risk management, with at least 3 in a leadership role.
• Deep knowledge of IT risk frameworks and standards.
• Strong analytical skills and executive-level communication capabilities.

Responsibilities

• Lead the development and implementation of security and risk policies.
• Establish governance frameworks across technology risk domains.
• Act as a trusted advisor on technology risk governance.

Skills

Strategic Vision

Influence & Collaboration

Communication

Integrity & Accountability

Team Leadership

Education

Bachelor’s degree in computer science or related field

Tools

NIST

ISO 27001

COBIT

CIS Controls

Job description

Job Description

Grade: P9Referral Level: Level 1Division: IGM-Tech

IGM Financial Inc. is one of Canada's leading diversified wealth and asset management companies with approximately $271 billion in total assets under management. The company provides a broad range of financial planning and investment management services to help more than two million Canadians meet their financial goals. Its activities are carried out principally through IG Wealth Management and Mackenzie Investments.

Under IGM Financial’s unique business model based on leading brands and multi-channel distribution strategy is Mackenzie Investments, founded in 1967. Mackenzie Investments is a holistic asset-management partner for thousands of Canadian financial advisors and the investors they support.

At Mackenzie Investments You Can Build Your Career with Confidence.

We have a vision and a strategy that will challenge the way business in this industry is done and help Canadians be successful in the ways that mean the most to them. As part of our team, you will do some of your best work, develop some of your most valuable skills and give back in ways that make a difference in the lives of Canadians. We are proud to be recognized as one of Canada’s Top Employers by Mediacorp Canada Inc. for empowering our employees with the tools to thrive, while also providing resources to ensure physical and mental wellness were put front and centre.

Join an unstoppable team that is embedded in continuous learning, understanding, and knowledge sharing. You will thrive in our supportive environment where you can indulge your curiosity to learn, while receiving the feedback you need to refine your skills and abilities. We are dedicated to offering a hybrid work environment when applicable.

Mackenzie Investments is a diverse workplace committed to doing business inclusively - this starts with having a representative workforce! We encourage applications from all qualified candidates that represent the diversity present across Canada – including racialized persons, women, Indigenous persons, persons with disabilities, 2SLGBTQIA+ community, gender diverse and neurodiverse individuals, as well as all who may contribute to the further diversification of ideas.

Role Summary

The Director, IT Risk Governance leads the Policies, Standards, and Governance function within the Information Technology Risk Management team. This strategic role is responsible for establishing and maintaining a comprehensive governance framework that ensures technology risk is effectively managed across the enterprise. Reporting to the AVP, IT Risk, the Director will drive the development and implementation of security and risk policies, standards, and oversight mechanisms that align with IGM security practices, regulatory expectations, enterprise risk frameworks, and industry best practices.

Key Responsibilities

Policies and Standards for Risk & Compliance

• Lead the development, implementation, and maintenance of technology policies and standards.
• Collaborate with technology teams and the second line of defence function to develop standards and guidelines that support security compliance and enable effective technology risk management.
• Conduct regular reviews and updates to ensure policies and standards remain effective and relevant to evolving cyber security regulations and frameworks.
• Ensure standards align with enterprise technology risk policy, industry best practices, and regulatory requirements.
• Support and enable the second and third lines of defense by ensuring clear documentation and demonstrable compliance.

Governance of Risk, Controls, and Metrics

• Establish and maintain integrated governance frameworks across the three technology risk domains: Information Security, IT Solutions & Availability, and Data Governance, as well as across business units.
• Ensure consistent governance practices by aligning with enterprise policies, regulatory requirements, and industry standards.
• Drive control effectiveness and compliance by developing, assessing, and enhancing controls to mitigate risks.
• Lead the development and reporting of Key Risk Indicators (KRIs) and Key Control Indicators (KCIs) to monitor risk posture and inform strategic decisions.
• Promote cross-functional collaboration and accountability by embedding risk ownership and streamlining governance processes.

Risk and Governance Continuous Improvement

• Identify and close gaps in risk and governance practices to strengthen control effectiveness.
• Continuously enhance risk frameworks and governance models through structured reviews and stakeholder input.
• Foster a culture of accountability and risk ownership by embedding governance principles across teams.
• Streamline governance processes to improve efficiency while maintaining compliance and oversight.
• Use data-driven insights and trend analysis to inform strategic risk decisions and prioritize improvements.

Stakeholder Engagement

• Act as a trusted advisor to senior leaders across IT and business units on matters of technology risk governance.
• Facilitate cross-functional collaboration to embed a risk-aware culture and practices.
• Lead responses to internal audits, regulatory reviews, and third-party assessments related to technology risk governance.

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field or equivalent experience.
• 10+ years of experience in technology risk management, IT governance, or cybersecurity, with at least 3 years in a leadership role.
• Deep knowledge of IT risk frameworks and standards (e.g., NIST, ISO 27001, COBIT, CIS Controls).
• Proven experience developing and managing enterprise-wide policies and standards.
• Strong analytical skills and executive-level communication capabilities.
• Certifications such as CRISC, CISSP, CISM, or CISA are highly desirable.

Leadership and Soft Skills

• Strategic Vision: Ability to align governance initiatives with enterprise risk strategy.
• Influence & Collaboration: Skilled at building consensus and driving change across diverse teams.
• Communication: Exceptional ability to translate complex risk concepts into business-relevant insights.
• Integrity & Accountability: Committed to upholding high standards of governance and ethical conduct.
• Team Leadership: Proven ability to lead and inspire teams, manage performance, and develop talent.

Please visit our career page by clicking on the following link: https://www.mackenzieinvestments.com/en/careers

We thank all applicants for their interest in Mackenzie Investments; however, only those candidates selected for an interview will be contacted.

Mackenzie Investments is an accessible employer committed to providing a barrier free recruitment experience. If you require an accommodation or this information in an alternate format at any stage of the recruitment process, please reach out to the Talent Acquisition team who will work with you to meet your needs.

#LI-JS2

#LI-Hybrid