Information Security Specialist (10+ years) to lead AI-enabled assurance transformation using IOR methodology and GRC frameworks TDJP00058819

S.I. Systems Ltd.; Toronto; Hybrid; CAD 120,000 - 160,000; Full time

Job summary

S.I. Systems Ltd. in Toronto/Mississauga seeks an Information Security Specialist (10+ years) to lead AI-enabled assurance transformation using IOR and GRC frameworks in a regulated banking environment. The role offers hybrid work with relocation between Toronto and Mississauga.

You will drive independent remediation assurance across audit and regulatory findings, collaborating with Legal, Privacy, and Technology teams to mature risk governance and control operating effectiveness.

Qualifications

• 10+ years as an IT Risk Specialist within governance, risk and compliance in regulated industries
• CRISC, CISA, or CISM (or equivalent) with assurance, validation or QA of audit/regulatory findings
• Audit testing techniques, evidence evaluation, issue remediation validation, root cause analysis, and control operating effectiveness assessment (including IOR)
• AI-enabled assurance design and implementation for challenge and QA reviews
• University degree or relevant field / equivalent experience
• Nice-to-have: Six Sigma, CISSP, AI security/risk tools

Responsibilities

• Conduct sample-based testing using IOR to validate control design, implementation, operating effectiveness, and sustainability
• Perform quality assurance to assess whether remediation plans are complete, risk-aligned, and validation-ready
• Lead independent, risk-focused reviews to confirm action plans, milestones, and resolutions are credible and evidenced
• Provide guidance to Technology segments and Technology Risk Services on Audit & Assurance Standards, IT Risk Governance Controls, and GRC frameworks
• Contribute to Governance Oversight & Control practice maturity by improving Risk Identification, Control Design, and Operating Effectiveness
• Lead the design and implementation of an AI-enabled capability to support challenge and QA reviews of remediation plans, milestones, and evidence
• Ensure AI solutions comply with information security, privacy, data protection, and model risk standards in partnership with Legal, Privacy, Model Risk, and Technology teams

Skills

IOR methodology

AI-enabled assurance

Audit testing techniques

Root cause analysis

Evidence evaluation

Remediation validation

Leadership & guidance

Six Sigma

AI security/risk experience/tools

Education

University degree or relevant field

CRISC / CISA / CISM certification or equivalent

CISSP certification (nice to have)

Tools

ServiceNow

Job description

Information Security Specialist (10+ years) to lead AI-enabled assurance transformation using IOR methodology and GRC frameworks TDJP00058819

Our financial services client is seeking a Information Security Specialist (10+ years) to lead AI-enabled assurance transformation using IOR methodology and GRC frameworks

Join a high-impact governance, risk, and compliance function within a regulated banking environment backfilling a critical role. This position drives independent remediation assurance across audit and regulatory findings, leveraging IOR, QA reviews, and AI-enabled assurance transformation. Expect broad exposure across technology domains and cross-functional networks, with opportunities to advance AI-aligned skill sets.

Contract, Toronto or Mississauga, Hybrid, currently 2 days but will be going in 4 days eventually!

• 310/320 Front Street West Corporate, Toronto, Ontario
• Or Mississauga 4880 Tahoe blvd

Must Haves

• 10+ years as an IT Risk Specialist within governance, risk and compliance in regulated industries
• CRISC, CISA, or CISM (or equivalent experience) with assurance, validation or QA of audit/regulatory findings
• Audit testing techniques, evidence evaluation, issue remediation validation, root cause analysis, and control operating effectiveness assessment (including IOR)
• AI-enabled assurance design and implementation for challenge and QA reviews
• University degree or relevant field / equivalent experience

Nice to Have

• Six Sigma
• CISSP certification or equivalent experience
• AI security/risk experience/tools
• Service-now

Responsibilities

• Conduct sample-based testing using IOR to validate control design, implementation, operating effectiveness, and sustainability
• Perform quality assurance to assess whether remediation plans are complete, risk-aligned, and validation-ready
• Lead independent, risk-focused reviews to confirm action plans, milestones, and resolutions are credible and evidenced
• Provide advice and guidance to Technology segments and Technology Risk Services on Audit & Assurance Standards, IT Risk Governance Control Frameworks, and GRC frameworks
• Contribute to Governance Oversight & Control practice maturity by improving Risk Identification, Control Design, and Operating Effectiveness
• Lead the design and implementation of an AI-enabled capability to support challenge and QA reviews of remediation plans, milestones, and evidence
• Ensure AI solutions comply with information security, privacy, data protection, and model risk standards in partnership with Legal, Privacy, Model Risk, and Technology teams