Senior Manager, Technology Risk & Controls

OMERS / Oxford Properties Group; Toronto; Hybrid; CAD 122,000 - 188,000; Full time

Benefits offered by this job

Annual incentive plan

Group benefits and retirement plans

Job summary

OMERS / Oxford Properties Group seeks an experienced professional to own the technology assurance program, overseeing control design, evidence testing, and annual conclusions. You will report to the Director, Operational Technology and Cybersecurity, with visibility to executives and committees, guiding a small team across a global property portfolio.

Lead the risk cycle, validate remediation, and ensure strong governance of technology controls in real estate operations.

Qualifications

• 8+ years in assurance, internal controls or audit practice with methodology design.
• Experience mapping control frameworks to enterprise risk and regulatory obligations.
• Experience leading risk cycles from assessment to remediation validation.
• Ability to test technology controls across network, platform, security and applications.
• Proven executive reporting and committee-level communication.
• People leadership experience including coaching and performance management.
• Bachelor’s degree or equivalent experience.

Responsibilities

• Own the assurance program over property technology, including scope and testing.
• Maintain internal controls framework mapping to Oxford's obligations.
• Run end-to-end evidence and attestation cycles with reporting to executives.
• Lead risk cycle: findings, remediation validation and residual risk acceptance.
• Assess technology and controls on transactions entering/leaving the portfolio.
• Design incident readiness exercises and carry forward actions.
• Develop metrics on control health and exception trends for leadership review.
• Coordinate across three lines of accountability for consistent approach.

Skills

Assurance leadership

Executive reporting

Risk management

Technology controls testing

Team leadership

Independent judgment

Education

Bachelor’s degree or equivalent experience

Tools

COBIT

ISO 27001

NIST CSF

Job description

Choose a workplace that empowers your impact. Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and passion. A place where you can personalize your employee journey to be — and deliver — your best. We are a leading global real estate investor, developer and manager. We combine our capital with our capabilities to create real estate that strengthens economies and communities. By prioritizing people, partnerships and places, we generate meaningful returns for OMERS members, enhance value for our capital partners and create a brighter world for our customers. Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work. Don’t just work anywhere — come build tomorrow together with us. Know someone at OMERS or Oxford Properties? Great!

Role Summary

Oxford owns and operates one of the world’s best known real estate portfolios, and the technology inside those buildings is now core operating infrastructure. This role owns the independent assurance program over that technology, ensuring that controls are properly designed, working as intended, and evidenced to a standard Oxford can stand behind. The role reports to the Director, Operational Technology and Cybersecurity, with a direct escalation route to Operational Risk and, if necessary to the relevant risk or audit committee. This is a second line mandate. The operating teams own and run the controls; this role tests them, forms a conclusion and reports it. Assurance conclusions do not require sign off from the function being assessed. You will lead a small assurance team and build a program that is still taking shape. Methodology, standards, cadence and reporting are yours to define, with executive and committee visibility from the start. The role covers a global portfolio of properties across Canada, the United States, the United Kingdom, continental Europe, Singapore and Australia. It carries genuine independence, executive access and committee exposure, and you will build both the program and the team from the ground up.

You will be responsible for

Owning the assurance program over property technology, covering methodology, risk-based planning, scope, sampling, testing, findings and the annual conclusion, and standing behind that conclusion even when it is unfavorable. Owning the internal controls framework as it applies to property technology: control design standards, evidence requirements, testing expectations, and the mapping between the technology control set and Oxford’s wider control obligations. Running the annual evidence and attestation cycle end to end, including planning, evidence standards, testing, exceptions and observations, and the position submitted. Leading the risk cycle: identifying findings, evaluating the controls behind them, recommending solutions, validating remediation, performing root cause analysis on control failures, and facilitating residual risk acceptance where remediation is not pursued. Delivering technology assurance on transactions: by assessing the technology and control position of assets entering the portfolio, assuring a secure and evidenced exit for those leaving it, and risk assessing significant technology initiatives before they reach the estate. Owning the incident readiness exercise program, including scenario design, delivery, evaluation and carry forward actions, with scenarios drawn from the real incident and near miss record. Building the metrics that surface control weakness, including control environment health, exception trends and remediation ageing, read against risk appetite, alongside recurring second line monitoring such as restricted access review. Reporting to executives and committee, translating control and risk findings into business terms leaders can act on, and acting as the coordination point for internal and external audits. Partnering across the three lines of accountability, the Business of accountability, the Business, Compliance, Enterprise Operational Risk and Internal Audit, so the approach to technology risk stays consistent, and leading, coaching and developing the assurance team. Own decision authority to set the assurance methodology, scope, sampling approach and testing standard, and decide what counts as sufficient evidence for a control. You also determine control ratings and findings, the attestation position submitted, exercise scope and evaluation criteria, the assurance requirements applied to acquisitions and dispositions, and the priorities of the program.

Required Skills & Experience

8+ years in assurance, internal controls or audit practice, including methodology design, sampling and evidence testing. Demonstrated experience designing control frameworks and mapping them to enterprise risk and regulatory obligations, with working knowledge of recognized frameworks such as COBIT, ISO 27001 and the NIST Cybersecurity Framework. Experience running the full risk cycle: assessment, control evaluation, remediation validation and residual risk acceptance. Enough technical depth across network, platform, security and application domains to test technology controls directly rather than rely on what is asserted. Proven executive and committee-level reporting, with the ability to put technology and audit findings in business terms. People leadership experience, including coaching and performance management. The professional judgement and credibility to hold an independent position within the structure you assess, and to elevate when it is warranted. Bachelor’s degree or equivalent experience.

Preferred Skills & Experience

A professional designation such as CPA, CIA, CISA, CISSP or equivalent. Experience developing control metrics and measurement where none existed before. Exposure to real estate, infrastructure or other multi-site operating environments, or to building technology and operational technology estates. Experience assuring technology in a multi-jurisdictional portfolio. Bachelor’s degree or equivalent experience.

Benefits

• You may also be eligible to receive an annual Incentive Award pursuant to our Short-term Incentive plan and our Long-Term Incentive plan (if applicable), and to participate in our group benefits and retirement plans – details on these elements of compensation are included within OMERS & Oxford offer letters
• The expected salary range for this position is $122,000.00 - $188,000.00 per year.

Company Culture

Oxford's purpose is to strengthen economies and communities through real estate. Our people-first culture is at its best when our workforce reflects the communities where we live and work — and the customers we proudly serve. From hire to retire, we are an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our Purpose@Work committee and employee recognition programs. Our flexible hybrid work guideline requires teams to come in to the office 4 days per week. Artificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision-making remain central to our candidate experience. We are passionate about inclusion and advocate for I&D across our network of employees, members and partners. We are proud of our commitment to developing a best in class approach to complete wellness for our employees and members. We invest in our people, providing them with opportunities so they can develop and grow.