Manager, Technology Risk Management

EQ Bank; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

EQ Bank is seeking a Manager for Technology Risk Management to oversee and advance its technology risk practices. This role plays a critical part in ensuring the bank aligns with regulatory expectations while managing and assessing various risk areas, including cybersecurity and AI. Candidates should have relevant educational backgrounds and substantial experience in IT risk oversight.

Qualifications

• 5-8 years of experience in IT risk oversight in a financial institution.
• Certifications like CRISC, CISSP, CISM, CCSP or CISA are a plus.
• Experience in Technology Audit and Cloud Governance is beneficial.

Responsibilities

• Lead risk identification and assessment processes.
• Monitor technology risk exposures and perform investigations.
• Support regulatory compliance efforts across the bank.

Skills

Risk Management

Analytical Skills

Communication

Project Management

Education

Undergraduate degree in technology, finance, economics, business administration or commerce

Job description

The Manager Technology Risk Management supports the development and ongoing execution of a strong technology risk management program across Equitable Bank and provides independent oversight and effective challenge (as the second line of defense) to ensure the Bank operates within its established technology risk appetite.

Main Activities :

• The Manager Technology Risk Management role is being created to strengthen and advance the Banks technology risk practices aligned with regulatory expectations including OSFIs B-13 CSSA and E-21 guidelines. This role will also play a key part in integrated risk management by fostering alignment across related domains such as operational resiliency business continuity change management and third-party risk.

Technology Risk Identification & Assessment

• Lead and support the execution of risk identification and assessment processes such as Risk and Control Self-Assessments (RCSA) and New Initiative Risk Assessments (NIRA) across technology cybersecurity and data domains.
• Support the identification and management of emerging risk areas including Artificial Intelligence (AI) ensuring associated risks are evaluated and addressed through appropriate governance mechanisms.
• Monitor technology risk exposures and perform investigations related to technology and cyber events; support root-cause analysis and track mitigation progress using the Governance Risk and Compliance (GRC) tool (Resolver).
• Review and challenge Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to validate accuracy relevance and emerging trends.
• Lead the Banks control testing program to assess the design and operating effectiveness of key controls in technology and cyber environments.
• Support the identification and oversight of AI and data risk and provide critical challenge to ensure alignment with regulatory expectations and evolving industry best practices.
• Manage and document risk acceptances ensuring appropriate approvals are in place residual risks are well understood and documented.

Governance & Oversight

• Support the continuous enhancement and implementation of technology-related policies standards and procedures.
• Collaborate with cross-functional stakeholders to support regulatory compliance efforts including OSFIs B-13 CSSA and E-21 guidelines.
• Act as a key point of contact during internal audits regulatory assessments and other independent reviews related to technology and cyber risk.

Third-Party & Business Continuity Management

• Provide risk oversight of third-party technology service providers and material arrangements and support reviews and assessments in collaboration with relevant stakeholders.
• Support activities related to Business Continuity Management (BCM) and Disaster Recovery (DR) programs as required.

Knowledge / Skill Requirements :

• Undergraduate degree in technology finance economics business administration or commerce.
• 5-8 years of experience in an information technology risk oversight role in a financial institution. Experience in a Technology Audit and Cloud Governance would be considered an asset.
• Technology Risk Management certifications such as CRISC CISSP CISM CCSP or CISA would be considered an asset.
• Strong understanding of risk management compliance matters and corporate governance.
• Strong analytical and quantitative skills and problem-solving abilities. Strong attention to detail.
• Strong written and verbal communication skills coupled with meeting facilitation abilities and good presentation skills.
• Good organizational project and time management skills to efficiently and independently deliver concurrent projects with competing priorities.
• Experienced in audit or sampling techniques and regulatory / legal requirements of financial institutions

Required Experience :

Manager

Key Skills

Children Activity,Graphic Designing,Information Technology,FX,Airlines,Asic

Employment Type : Full-Time

Experience : years

Vacancy : 1

Create a job alert for this search