Information Risk Governance and Control Analyst

Compunnel, Inc.; Toronto; On-site; CAD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking an Information Risk Governance and Control Analyst to join their dynamic team. This role is pivotal in supporting risk and compliance functions, focusing on evaluating and documenting IT and cybersecurity controls. The ideal candidate will have a strong background in governance, risk, and control within IT, with a keen analytical mindset. You will collaborate with various teams to enhance governance frameworks and ensure compliance with audit and regulatory requirements. This position offers a unique opportunity to work with cutting-edge technology in a highly regulated environment, making a significant impact on the organization's risk management strategies.

Qualifications

• 4+ years in governance, risk, and control role within IT or cybersecurity.
• Strong understanding of cybersecurity risk management principles.

Responsibilities

• Identify control gaps and assess effectiveness of risk mitigation measures.
• Collaborate with teams to ensure effective control implementation.

Skills

Governance, Risk, and Control

Cybersecurity Risk Management

IT Control Testing

Analytical Skills

Microsoft Office Suite

Data Analysis Tools

Education

Bachelor’s Degree in Management Information Systems

Bachelor’s Degree in Computer Information Sciences

Tools

Microsoft Excel

Microsoft Word

Microsoft PowerPoint

Data Analysis Tools

Job description

Information Risk Governance and Control Analyst

05/08/2025

Contract

Active

Job Description:

Job Summary

The Information Risk Governance and Control Analyst plays a key role within the Enterprise Technology Services (ETS) Governance and Control team, supporting Line 1B risk and compliance functions. This position focuses on evaluating, testing, and documenting IT and cybersecurity controls, ensuring compliance with audit, SOX, and internal risk management requirements. The role offers exposure to a broad range of technology domains, including cloud computing, architecture, security, and service management.

Key Responsibilities

• Identify control gaps and assess the effectiveness of existing risk mitigation measures
• Document control descriptions and associated process flows
• Execute control testing and support risk assessments (SOX, initiative, self-assessments)
• Analyze and interpret test results, escalating issues where necessary
• Collaborate with ETS teams to ensure effective control implementation and closure of findings
• Maintain detailed records of testing activities and supporting documentation
• Support audit facilitation efforts by preparing evidence and responding to auditor inquiries
• Assist in the development and enhancement of governance frameworks, policies, and procedures

Required Qualifications

• Minimum 4 years of experience in a governance, risk, and control role within IT or cybersecurity
• Strong understanding of technology and cybersecurity risk management principles
• Experience with IT control testing, evaluation, and reporting
• Analytical mindset with the ability to identify root causes and recommend improvements
• Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint)
• Familiarity with data analysis tools

Preferred Qualifications (if any)

• Excellent verbal and written communication skills
• Experience working in financial services or a highly regulated industry
• Knowledge of SOX compliance, IT General Controls (ITGCs), or NIST frameworks
• Prior exposure to cloud technologies or architecture governance is an asset

Certifications (if any)

• Not mandatory, but certifications such as CISA, CRISC, or CISSP are considered a plus

Education

• Bachelor’s Degree in Management Information Systems, Computer Information Sciences, or a related field
• 4+ years of relevant industry experience