Enterprise Risk Management Specialist

Appcast; Ottawa; On-site; CAD 80,000 - 100,000; Full time

Job summary

A leading consulting firm is seeking an experienced Enterprise Risk Management (ERM) Specialist to design and develop risk management policies for clients. The role involves conducting risk assessments, enhancing ERM capabilities, and ensuring compliance with regulations. Ideal candidates will have a strong cybersecurity background and excellent communication skills.

Qualifications

• 5-8 years overall experience, with 3 years in ERM.
• Experience in IT consulting or client-facing roles preferred.

Responsibilities

• Lead development of ERM policies and frameworks.
• Conduct risk assessments and recommend improvements.
• Collaborate with client leadership for alignment.

Skills

Cybersecurity

Communication

SaaS

Education

Certification in cybersecurity or ERM

Job description

Position ID : J0525-0213

Employment Type : Full Time

Position Description :

We are looking for an experienced Enterprise Risk Management (ERM) Specialist who will be responsible for designing and developing risk management policies and frameworks for one of our clients. This is a client-facing role that combines technical expertise with advisory skills to help establish or enhance their ERM capabilities, with a strong emphasis on policy development.

Your future duties and responsibilities :

• Lead the development, review, and enhancement of ERM policies, frameworks, and risk governance models tailored to client needs.
• Conduct risk assessments to identify gaps in existing client policies and recommend improvements aligned with regulatory requirements and industry best practices.
• Collaborate with client leadership teams to ensure alignment between business goals and risk strategies.
• Guide clients in integrating regulatory and compliance expectations into their policy documents.
• Stay updated on evolving regulations, industry trends, and standards in enterprise risk management.

Required qualifications to be successful in this role :

• Minimum of 5-8 years of overall experience.
• At least 3 years of experience specifically in the ERM space.
• Cybersecurity background is mandatory.
• Experience working in IT consulting or client-facing roles is preferred.
• Experience in IT risk assessment and mitigation strategy creation and documentation.
• Cross-functional skills in managing and understanding third-party risk.
• Strong written and verbal communication skills, especially in policy writing and client presentations.

Certification in cybersecurity or ERM is preferred.

Additional Information :

Skills include:

• English proficiency
• Experience with Software as a Service (SaaS)

What you can expect from us :

At CGI, we foster a culture rooted in ownership, teamwork, respect, and belonging. We support your growth by providing opportunities to develop skills, embrace new challenges, and work on innovative solutions. We value diversity and inclusion, striving to create a work environment where everyone can succeed. If you require accommodations during the recruitment process, please let us know.

Join us and be part of one of the largest IT and business consulting firms in the world.