Infrastructure Program Manager

Delpath; Toronto; On-site; CAD 100,000 - 150,000; Full time

Job summary

Delpath is seeking an IT Program Manager (Security Manager) for a 1-year contract based in Toronto. The role requires extensive experience in IT risk management, regulatory compliance, and risk assessment, with a focus on data security, controls, and governance across complex information systems.

The selected candidate will lead risk mitigation, coordinate audits, and liaise with HM and Director during interviews; on-site work at 40 King Street, 11th floor, with potential extension and

Qualifications

• 5+ years of experience as a Program Manager with IT risk management.
• 5+ years of experience in technology risk management, with a focus on risk assessment and control evaluation.
• Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (e.g., NIST, ISO, FFIEC, GDPR).
• Proficiency in data security, risk management & controls, security governance, data analytics, and analytical thinking, with a track record of implementing effective risk mitigation strategies.
• 2+ years of experience in IT Audit (eg. Application controls, pervasive controls, issue management)

Responsibilities

• Lead IT risk management across banking environments.
• Oversee risk assessments, controls evaluation and incident response.
• Coordinate regulatory compliance activities and audits.
• Collaborate with HM and Director on candidate assessments during interviews.

Skills

IT risk management

Tech risk mgmt

Regulatory compliance

Data security & governance

IT Audit

Cybersecurity risk

FI industry exp

Security certs

Regulatory frameworks

Education

Post-secondary degree in CS/CE or related field

Job description

IT Program Manager - 3 (Security Manager)

Contract Duration: 1 year

Possibility of extension and conversion to FTE

Number of Positions: 3

Schedule Hours: 9am-5pm Monday-Friday; standard 37.5 hrs/week (Possible OT)

Candidate Requirements/Must Have Skills:

1. 5+ years of experience as a Program manager with IT risk management (e.g. Logical Access, Data Leakage, Disaster Recovery)
2. 5+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk assessment and control evaluation
3. Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (e.g., NIST, ISO, FFIEC, GDPR)
4. Proficiency in data security, risk management & controls, security governance, data analytics, and analytical thinking, with a track record of implementing effective risk mitigation strategies
5. 2+ years of experience in IT Audit (eg. Application controls, pervasive controls, issue management

Nice-To-Have Skills:

• Experience with Cybersecurity Risk Management
• FI experience (experience in big 4 consulting firms)
• Industry certifications (e.g. CISSP, CISA, CISM, CRISC)
• Advanced knowledge of relevant regulatory rules (OSFI, FFIEC, NYDFS 500) and frameworks (COBIT)

Education: post-secondary degree/diploma in Computer Science, Computer Engineering, or related field

Best VS. Average Candidate:

• Strong understanding of IT risk management frameworks in a global banking environment.
• Able to convey complex concepts and ideas on issues requiring interpretation and opinion.
• Maintain in-depth knowledge of cyber and IT risks and controls across various information system architecture and engineering domains, such as data protection, application security, identity and access management, vulnerability management, change management, network security, endpoint security, logging and monitoring, and incident management. Stay actively engaged in the industry on the latest in cyber risk and emerging operational risks.

1-2 rounds

1st - HM + Director - 45 mins - in-person (40 king street, 11th floor, meet candidates in lobby)

• IT risk/issue management assessment will be given during the interview (not a take home assignment)

2nd - HM + Director - 30 mins - MS Teams Video