Senior Technology Risk Analyst

Brainhunter Systems Ltd; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Brainhunter Systems Ltd is seeking a Senior Technology Risk Analyst for a contract opportunity. The role focuses on designing, implementing, and testing technology controls in line with internal standards and external frameworks such as ISO 27001, SOC 2, PCI DSS, and ICOFR.

Responsibilities include identifying control gaps, developing test scripts, enabling test automation, and ensuring ongoing monitoring of policy compliance across the enterprise.

Qualifications

• Experience in information security or technology risk projects (5–10 years preferred).
• Familiarity with ICOFR, NIST, SOC2, ISO, PCI, SWIFT and related controls frameworks.

Responsibilities

• Lead design, implementation and testing of technology controls aligned to internal standards and external frameworks.
• Identify current and future state control procedures; document gaps and improvements.
• Develop control test scripts and facilitate test execution; support test automation scripting.
• Provide SME guidance across technology control domains: information security, IT operations, resiliency, delivery.
• Monitor policy compliance and reinforce adherence across the organization.
• Collaborate with stakeholders to identify risks and validate control effectiveness.
• Lead stakeholder meetings and workshops; ensure clear, concise communication and consensus.

Skills

Oral communication

Written communication

Analytical thinking

Problem solving

Stakeholder management

Education

University or College education in Computer Science/Engineering/ MIS/Business

Tools

ServiceNow IRM

Job description

Brainhunter is currently seeking the services of a \"Senior Technology Risk Analyst\" for a contract opportunity with one of our Valued Clients.

In this role, the contractor will be a strong collaborator that works closely with project team members, business partners and technical experts. Contractor will use your strong analysis and critical thinking skills to understand technology risks and control objectives; elicit, document, and communicate control designs; and partner with control owners to test control effectiveness.

What you will do:

• Lead the design, implementation, and testing of technology controls, ensuring alignment with internal standards and external frameworks (e.g., ISO 27001, ICOFR, SOC 2, SWIFT, PCI DSS)
• Identify and document current state control procedures and work with control owners to build the proposed future state by identifying control gaps, improvement opportunities, and impacts due to technology implementations, while assessing impacts to other processes/controls, stakeholders and systems.
• Lead the development of control test scripts ensuring alignment with internal standards and external frameworks and facilitate control test execution
• Support the development of control test automation scripting
• Serve as a subject matter expert across key technology control domains, including information security, IT operations, technology resiliency, and systems delivery
• Support ongoing monitoring of compliance with policies and standards, and assist in promoting and reinforcing adherence across the organization
• Contribute to the identification and assessment of technology risks and controls across the enterprise
• Evaluate the adequacy of issue remediation plans and validate control design and operating effectiveness
• Lead and facilitate stakeholder meetings, walkthroughs, workshops and reviews of deliverables.
• Develop collaborative partnerships and provide leadership across a variety of stakeholder groups, ensuring that information collected from multiple sources is critically evaluated, conflicts are resolved, information is clearly communicated at the appropriate level of detail, and requests are distinguished from the underlying business needs with the goal of driving to consensus.

Experience:

• Experience working on Information Security or Technology Risk projects is a must-have asset. These may include projects focused on delivery of solutions related to Technology Risk Management, Information Security, Identity and Access Management, Governance Risk and Compliance.
• Experience and proficiency with consolidated internal control frameworks mapped to industry frameworks such as ICOFR, NIST, IFRS17, OSFI, SOC2, ISO, CIS, SWIFT, PCI.
• Experience with ServiceNow IRM is preferred
• 5-10 years' experience as a business process and/or systems analyst documenting the following: process maps and workflow diagrams, RACI matrices, compliance requirements, and gap analysis
• Experience with IT project methodologies, processes, and practices; experience in both waterfall and agile methodologies is an asset.

Skills:

• Excellent oral, written and interpersonal communications skills, with the ability to translate complex technical subject matter in business terms for executive audiences, succinctly and professionally.
• Strong analytical and problem-solving skills, particularly critical thinking, with a strong attention to detail.
• Customer centric approach to problem solving with the ability to collaborate, resolve conflicts, and reach consensus with others.
• Ability to work in a virtual team environment, facilitating and contributing to work across geographies and across other functional teams
• Strong organizational skills with the ability to manage multiple competing workstreams and priorities under time pressure without compromising quality.
• Ability to adapt to changing priorities.
• Ability to influence and negotiate win-win outcomes among cross-functional teams.
• Ability to grasp concepts quickly and to work independently with minimal direction.

Certifications/Education:

• University or College education in Computer Science, Computer Engineering, Management Information Systems, Commerce, Business Administration or a related field, or equivalent combination of education and experience

We thank all applicants for their interest, however only those candidates selected for Interviews will be contacted.