IT Resilience & Governance Analyst

Optiom Inc.; Calgary; Hybrid; CAD 85,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Certification support

Aviva resources

Job summary

Optiom Inc. is seeking an IT governance professional to join our team in Calgary. You will own the governance artifacts, build and maintain our CMDB, and drive the consolidation of vendor agreements under a single, auditable register.

You will run business impact assessments, set recovery targets, and write/ exercise Business Continuity, Disaster Recovery, and Incident Response plans for critical applications, while keeping security controls current for due diligence inquiries.

Qualifications

• 3-6 years in IT governance, risk, compliance, service management, or IT security in an operational role.
• Hands-on experience building or rebuilding a CMDB or asset/configuration register.
• Experience authoring continuity, disaster recovery, or incident response documentation.
• Working knowledge of frameworks (NIST CSF, ISO 27001/22301, COBIT, or ITIL).
• Ability to read contracts and extract key terms (notice periods, SLAs).

Responsibilities

• Build and maintain Optiom's CMDB - applications, infrastructure, integrations, data flows.
• Consolidate all vendor agreements into a single register and identify gaps and expiries.
• Run business impact analyses and rate applications for criticality and recovery targets.
• Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans.
• Keep security policies and control documentation current for due diligence questionnaires.

Skills

IT governance

Risk management

IT security

Service management

Policy documentation

Vendor management

Education

Post-secondary education in IT or business

Tools

ServiceNow

Jira

Confluence

Microsoft 365

Entra ID

Defender

Job description

Optiom Inc. is seeking an IT governance professional to join our team in Calgary. You will own the governance artifacts, build and maintain our CMDB, and drive the consolidation of vendor agreements under a single, auditable register.

You will run business impact assessments, set recovery targets, and write/ exercise Business Continuity, Disaster Recovery, and Incident Response plans for critical applications, while keeping security controls current for due diligence inquiries.