Domain Control Support

ALLTECH CONSULTING SVC INC; Quebec; On-site; CAD 90,000 - 140,000; Full time

Job summary

A consulting firm in Quebec seeks a skilled professional to support Technology risk and control management. Responsibilities include developing risk frameworks, stakeholder communication, and producing necessary reporting. The ideal candidate will have 7-15 years of experience, a strong background in risk management, and proficiency in Technology policies. Excellent communication in English is crucial.

Qualifications

• 7-15 years of experience required.
• Experience in risk and control management.
• Proficiency in English is essential.
• Strong analytical and reporting capabilities.
• Excellent organization and ability to handle multiple priorities.

Responsibilities

• Support risk and control activities in Technology domain.
• Produce risk reporting on a monthly and quarterly basis.
• Engage with stakeholders to maintain communication.
• Manage stakeholder communications and proactive messaging.
• Provide program/operational support to deliver risk/control actions on deadlines.
• Support control testing and measurement within Technology domains.
• Contribute to RCSA processes and impact assessment for Technology controls.
• Produce monthly/quarterly risk or control reporting.
• Analyze risk/control indicators and escalate issues to management.
• Engage stakeholders to collect risk/control information; may involve Crypto related controls.

Skills

Writing Technology policies, Standards and Procedures

Strong analytical and report writing skills

Effective organizational skills

Awareness of financial legislation

Knowledge of ITIL, CobiT, ISO 27001

Tools

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

Microsoft Outlook

Job description

Experience Level: Level 4 (7-15 years)

Responsibilities

• Support the DCO and/or wider team to develop or enhance risk, control changes or improvements specific to Technology, Information Security or Cyber Security.
• Support the DCO aligned to a particular Technology domain to maintain a view of the risks, controls and supporting artefacts including any relevant governance content, issues, action plans or other data points.
• Assist with the creation of risk, control change artifacts or content
• Identify, maintain and manage stakeholder group and/or communications to ensure that there is pro‑active and timely messaging to internal and external parties.
• Provide program or operational support to deliver agreed risk, control activities or actions; working to deadlines or agreed milestones.
• Support Technology control testing or control measurement development, including testing compliance within Technology domain area(s).
• Support the Firm’s risk and control assessment process (RCSA) to ensure that any impact to Technology controls are understood.
• Produce Technology risk or control reporting/commentary on a monthly and quarterly basis to satisfy internal or key stakeholder requirements.
• Perform analysis of risk and control indicators to identify and elevate appropriate issues for management attention.
• Engage local stakeholder in execution and collection of risk or control information. This role will have a partial expectation for development of controls related to Distributed Ledger Technologies (Crypto)

Skills Required

1. Experience writing Technology policies, Standards and Procedures
2. Awareness of financial legislation and regulations impacting technology risk and control management processes including technology governance, information security, cyber security and Technology.
3. Awareness of risk and control management concepts, internal controls and industry technology risk management frameworks such as ITIL, CobiT, and ISO 27001.
4. Strong analytical and report writing skills
5. Effective organizational skills and an ability to manage multiple demands and changing priorities.

Skill preferred

1. Experience in Distributed Ledger Technologies (Crypto) and the heightened risks associated with Crypto.
2. Detail oriented and Effective time management and planning skills (e.g. prioritization, multi-tasking and delivery focused)
3. Strong problem‑solving skills and accurate, delivery focused mindset with good attention to detail.
4. Able to work effectively as a team or as an individual contributor, comfortable to self‑organize.
5. Experience of working with Microsoft packages (Word, Excel, PowerPoint, Outlook)
6. Excellent communication and interpersonal skills
7. Ability to work effectively with all levels of the organization.
8. Excellent spoken and written English is essential for this position.

Skills Desired

• Technology operations, Technology Oversight (2LOD) or audit background in a complex financial institution.

Team Description

The Technology Risk, Governance and Controls (TRGC) department provides a range of Group-wide Governance and Control functions focused on Technology, Information Security or Cyber‑Security within the Firm. This FTC position within Technology Controls Group will support the ongoing provision of Technology Control subject matter expertise (SME) in the design, development and on‑going operation of the controls you would expect within a complex, diverse Technology environment that underpins a global Bank and organization like our Company. The position will be exposed to a significant pace of control change; with the Firm undertaking a strategic enhancement programme focused on ensuring that the current Technology, Information Security and Cyber Security controls remain fit‑for‑purpose; as well as leveraging opportunities (where possible) to utilize continuous control monitoring and measurement.

In addition, this role will have access and exposure to the on‑going evolution of risk and control architecture that supports the Firm to operate within appetite of Operational Risks as the control environment, evolves further to support additional regulatory or legislative requirements, optimization or continued focus on control measurement and automation.

This role will work alongside the Domain Control Officer within the Technology Controls group. The Domain Control Officer (DCO) is accountable for providing end‑to‑end risk management over a particular control domain. The DCO works in partnership with groups across all lines of defense to understand and manage the risks and controls relevant to that domain. This includes defining the relevant risks and gaining a deep understanding of the related controls and their effectiveness at holistically mitigating those risks.