Senior Manager, Technology Risk & Controls

omers; Toronto; On-site; CAD 140,000 - 200,000; Full time

Job summary

OMERS seeks a senior assurance leader to own the technology assurance program across its global property portfolio. You will design and run the methodology, sampling, testing and reporting of control effectiveness for property technology, with escalation paths to risk committees.

You will lead a small team, manage evidence cycles, and coordinate with Compliance, Enterprise Operational Risk and Internal Audit while driving improvements in control design and testing cadence.

Qualifications

• 8+ years in assurance, internal controls or audit practice, including methodology design, sampling and evidence testing.

Responsibilities

• Own the assurance program over property technology, including methodology, risk-based planning, scope, sampling, testing, findings and the annual conclusion.
• Own the internal controls framework as it applies to property technology: control design standards, evidence requirements, testing expectations.
• Run the annual evidence and attestation cycle end to end, including planning, evidence standards, testing, exceptions and observations.
• Lead the risk cycle: identify findings, evaluate controls, recommend solutions, validate remediation and acceptance where needed.
• Deliver technology assurance on transactions by assessing technology and control positions of assets entering or leaving the portfolio.
• Own the incident readiness exercise program, including scenario design, delivery, evaluation and carry forward actions.
• Build metrics that surface control weakness and remediation ageing, read against risk appetite and second line monitoring.
• Report to executives and committees, translating findings into actionable business terms and coordinating audits.
• Partner with Compliance, Enterprise Operational Risk and Internal Audit to ensure a consistent approach and lead the assurance team.

Skills

Assurance experience

Control frameworks

Job description

Choose a workplace that empowers your impact. Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and passion. A place where you can personalize your employee journey to be - and deliver - your best.

We are a leading global real estate investor, developer and manager. We combine our capital with our capabilities to create real estate that strengthens economies and communities. By prioritizing people, partnerships and places, we generate meaningful returns for OMERS members, enhance value for our capital partners and create a brighter world for our customers.

Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work.

Don't just work anywhere - come build tomorrow together with us.

Know someone at OMERS or Oxford Properties? Great! If you're referred, have them submit your name through Workday first. Then, watch for a unique link in your email to apply.

Role Summary:

Oxford owns and operates one of the world's best known real estate portfolios, and the technology inside those buildings is now core operating infrastructure. This role owns the independent assurance program over that technology . It is the objective check that controls are properly designed , working as intended, and evidenced to a standard Oxford can stand behind.

The role reports to the Director, Operational Technology and Cybersecurity, with a direct escalation route to Operational Risk and to the relevant risk or audit committee. This is a second line mandate . The operating teams own and run the controls ; this role tests them, forms a conclusion and reports it. Assurance conclusions do not require sign off from the function being assessed.

You will lead a small assurance team and build a program that is still taking shape . Methodology , standards, cadence and reporting are yours to define , with executive and committee visibility from the start.

The role covers a global portfolio of properties across Canada, the United States, the United Kingdom, continental Europe, Singapore and Australia. It carries genuine independence, executive access and committee exposure , and you will build both the program and the team from the ground up.

You will be responsible for:

• Owning the assurance program over property technology , covering methodology , risk-based planning, scope, sampling, testing, findings and the annual conclusion , and standing behind that conclusion even when it is unfavorable .


• Owning the internal controls framework as it applies to property technology: control design standards, evidence requirements, testing expectations, and the mapping between the technology control set and Oxford's wider control obligations.


• Running the annual evidence and attestation cycle end to end , including planning, evidence standards, testing, exceptions and observations, and the position submitted.


• Leading the risk cycle: identifying findings, evaluating the controls behind them, recommending solutions, validating remediation, performing root cause analysis on control failures, and facilitating residual risk acceptance where remediation is not pursued.


• Delivering technology assurance on transactions : assessing the technology and control position of assets entering the portfolio, assuring a secure and evidenced exit for those leaving it, and risk assessing significant technology initiatives before they reach the estate.


• Owning the incident readiness exercise program, including scenario design, delivery, evaluation and carry forward actions, with scenarios drawn from the real incident and near miss record.


• Building the metrics that surface control weakness , including control environment health, exception trends and remediation ageing , read against risk appetite, alongside recurring second line monitoring such as restricted access review.


• Reporting to executives and committee , translating control and risk findings into business terms leaders can act on, and acting as the coordination point for internal and external audits.


• Partnering across the three lines with Compliance, Enterprise Operational Risk and Internal Audit so the approach to technology risk stays consistent , and leading, coaching and developing the assurance team.

Decision authority

You will set the assurance methodology , scope, sampling approach and testing standard , and decide what counts as sufficient evidence for a control. You also determine control ratings and findings , the attestation position submitted , exercise scope and evaluation criteria , the assurance requirements applied to acquisitions and dispositions , and the priorities of the program.

Required Skills & Experience

• 8+ years in assurance, internal controls or audit practice, including methodology design, sampling and evidence testing.


• Demonstrated experience designing control frameworks and mapping them to enterprise risk and regulatory obligations, with working k