Senior GRC Risk & Controls Consultant

Kelly; Toronto; Hybrid; CAD 110,000 - 140,000; Full time

Job summary

Kelly is seeking a Senior GRC Risk & Controls Consultant to support enterprise risk and control governance within the Technology organization. The role partners with Technology, AI, Data Governance, Risk, Compliance, and Business stakeholders to identify, assess, monitor, and remediate control gaps across the organization.

This position requires applying risk expertise, critical thinking, and professional judgment to evaluate control effectiveness, challenge assumptions, identify gaps, and drive

Qualifications

• 3+ years of hands-on experience with Archer or a similar GRC platform.
• 3-5+ years of experience in Risk Management, Controls, Governance, Audit, Compliance, or Financial Services environments.
• Strong understanding of inherent and residual risk concepts, control testing, and risk-to-control mapping.
• Experience performing control assessments, testing, documentation, and remediation tracking.

Responsibilities

• Perform risk and control assessments, control testing, and control documentation.
• Execute risk-to-control mapping and maintain control inventories.
• Manage governance records and control libraries within Archer/GRC platforms.
• Review risk, control, issue, and remediation records for accuracy and completeness.
• Identify control gaps, data quality issues, and governance deficiencies.
• Assess control design and effectiveness against identified risks.
• Support regulatory, audit, and governance reporting requirements.
• Track remediation activities and ensure timely closure of action items.
• Coordinate with stakeholders to collect evidence and resolve outstanding issues.
• Lead discussions with business and technology teams to identify solutions and improve control environments.
• Support data governance, technology risk, security control assessments, and resilience initiatives.

Skills

Risk management

Governance

Audit & Compliance

Tools

Archer

GRC platforms

Job description

Location: Hybrid (Toronto, ON) - Onsite Tuesday to Thursday

Conversion to Full-Time: Possible

About the Opportunity

Our client, a leading financial services organization, is seeking a Senior GRC Risk & Controls Consultant to support enterprise risk and control governance activities within the Technology organization. This role will partner with Technology, AI, Data Governance, Risk, Compliance, and Business stakeholders to identify, assess, monitor, and remediate control gaps across the organization.

This is not a purely administrative Archer role. We are looking for a professional who can apply risk expertise, critical thinking, and professional judgment to evaluate control effectiveness, challenge assumptions, identify gaps, and drive remediation efforts.

What You'll Be Doing

• Perform risk and control assessments, control testing, and control documentation
• Execute risk-to-control mapping and maintain control inventories
• Manage governance records and control libraries within Archer/GRC platforms
• Review risk, control, issue, and remediation records for accuracy and completeness
• Identify control gaps, data quality issues, and governance deficiencies
• Assess control design and effectiveness against identified risks
• Support regulatory, audit, and governance reporting requirements
• Track remediation activities and ensure timely closure of action items
• Coordinate with stakeholders to collect evidence and resolve outstanding issues
• Lead discussions with business and technology teams to identify solutions and improve control environments
• Support data governance, technology risk, security control assessments, and resilience initiatives

Required Qualifications: Must-Have Experience

• 3+ years of hands-on experience with Archer or a similar GRC platform
• 3-5+ years of experience in Risk Management, Controls, Governance, Audit, Compliance, or Financial Services environments
• Strong understanding of:
• Inherent and Residual Risk concepts
• Control Testing & Assurance
• Risk-to-Control Mapping
• Experience performing control assessments, testing, documentation, and remediation tracking
• Experience managing governance data, reporting, and stakeholder communications
• Ability to independently manage deliverables and drive activities to completion

Preferred Experience

• Financial Services industry experience
• Technology Risk, Operational Risk, Data Governance, or First Line Risk & Controls experience
• Technology Governance or Cloud Risk experience
• Security Control Assessment experience
• Experience supporting AI, Technology, or Enterprise Risk programs
• Professional certifications such as CRISC, CISA, CISSP, CSCA, or related risk/governance credentials

Soft Skills

• Strong attention to detail and organizational skills
• Excellent communication and stakeholder management abilities
• Ability to challenge existing processes and identify improvement opportunities
• Confident facilitating meetings and influencing cross-functional teams
• Self-starter who can work independently with minimal supervision
• Strong critical-thinking and problem-solving abilities

Ideal Candidate

You have worked within a Risk, Governance, Controls, Audit, or Technology Risk function and have recent hands-on Archer experience. You understand how risks should be mapped to controls, can assess whether controls effectively mitigate risks, and are comfortable identifying gaps and recommending corrective actions. You are proactive, highly organized, and capable of driving remediation efforts across multiple stakeholder groups.

Why Apply?

• Opportunity to work with a leading financial institution
• High-visibility role supporting enterprise-wide governance initiatives
• Exposure to technology, AI, risk, compliance, and data governance programs
• Collaborative and fast-paced environment
• Long-term contract with extension and conversion potential

Use AI for Hiring: Our recruitment process for this role includes the use of AI-based tools to help evaluate candidate qualifications and screen applications.