Senior Technology Risk & Controls Analyst (Control Design & Testing) - 6881

S.I. Systems Ltd.; Toronto; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

S.I. Systems Ltd. in Toronto (Hybrid, 3x/week) seeks a Senior Technology Risk & Controls Analyst for a 14-month contract.

The role focuses on designing, implementing, and testing technology controls while aligning with ISO, ICOFR, SOC 2, and PCI standards. You will document current and future state controls and lead control testing with cross-functional teams. The ideal candidate has 5–10 years in business process or systems analysis related to technology risk and security, with strong

Qualifications

• Experience on Information Security or Technology Risk projects.
• Familiarity with internal control frameworks mapped to ICOFR, NIST, OSFI, SOC 2, ISO, CIS, SWIFT, PCI.
• Experience with IT project methodologies; waterfall and agile.

Responsibilities

• Lead the design, implementation, and testing of technology controls aligned with internal standards and external frameworks.
• Identify and document current state control procedures and build the proposed future state with control gaps.
• Lead development of control test scripts and facilitate test execution.
• Support development of control test automation scripting.
• Serve as SME across information security, IT operations, resiliency, and systems delivery.
• Monitor compliance with policies and standards and promote adherence across the organization.
• Assess technology risks and controls across the enterprise.
• Evaluate remediation plans and validate control design and operating effectiveness.
• Lead stakeholder meetings, walkthroughs, and reviews of deliverables.
• Develop partnerships across stakeholders to drive consensus.

Skills

Information Security

Technology Risk

Governance Risk and Compliance

ICOFR & NIST knowledge

Stakeholder management

Tools

ServiceNow IRM

Job description

Senior Technology Risk & Controls Analyst (Control Design & Testing) - 6881

Senior Technology Risk & Controls Analyst (Control Design & Testing) - 6881

Duration: 14 Months

Overview:

In this role, the contractor will be a strong collaborator that works closely with project team members, business partners and technical experts. Contractor will use your strong analysis and critical thinking skills to understand technology risks and control objectives; elicit, document, and communicate control designs; and partner with control owners to test control effectiveness.

Responsibilities:

• Lead the design, implementation, and testing of technology controls, ensuring alignment with internal standards and external frameworks (e.g., ISO 27001, ICOFR, SOC 2, SWIFT, PCI DSS)
• Identify and document current state control procedures and work with control owners to build the proposed future state by identifying control gaps, improvement opportunities, and impacts due to technology implementations, while assessing impacts to other processes/controls, stakeholders and systems.
• Lead the development of control test scripts ensuring alignment with internal standards and external frameworks and facilitate control test execution
• Support the development of control test automation scripting
• Serve as a subject matter expert across key technology control domains, including information security, IT operations, technology resiliency, and systems delivery
• Support ongoing monitoring of compliance with policies and standards, and assist in promoting and reinforcing adherence across the organization
• Contribute to the identification and assessment of technology risks and controls across the enterprise
• Evaluate the adequacy of issue remediation plans and validate control design and operating effectiveness
• Lead and facilitate stakeholder meetings, walkthroughs, workshops and reviews of deliverables.
• Develop collaborative partnerships and provide leadership across a variety of stakeholder groups, ensuring that information collected from multiple sources is critically evaluated, conflicts are resolved, information is clearly communicated at the appropriate level of detail, and requests are distinguished from the underlying business needs with the goal of driving to consensus.

Must haves:

• Experience working on Information Security or Technology Risk projects is a must-have asset. These may include projects focused on delivery of solutions related to Technology Risk Management, Information Security, Identity and Access Management, Governance Risk and Compliance.
• Experience and proficiency with consolidated internal control frameworks mapped to industry frameworks such as ICOFR, NIST, IFRS17, OSFI, SOC2, ISO, CIS, SWIFT, PCI.
• Experience with ServiceNow IRM is preferred
• 5-10 years’ experience as a business process and/or systems analyst documenting the following: process maps and workflow diagrams, RACI matrices, compliance requirements, and gap analysis
• Experience with IT project methodologies, processes, and practices; experience in both waterfall and agile methodologies is an asset.

Senior Technology Risk & Controls Analyst (Control Design & Testing) - 6881

Senior Technology Risk & Controls Analyst (Control Design & Testing) - 6881

Duration: 14 Months

Location: Toronto (Hybrid, 3x/week)

Overview:

In this role, the contractor will be a strong collaborator that works closely with project team members, business partners and technical experts. Contractor will use your strong analysis and critical thinking skills to understand technology risks and control objectives; elicit, document, and communicate control designs; and partner with control owners to test control effectiveness.

Responsibilities:

• Lead the design, implementation, and testing of technology controls, ensuring alignment with internal standards and external frameworks (e.g., ISO 27001, ICOFR, SOC 2, SWIFT, PCI DSS)
• Identify and document current state control procedures and work with control owners to build the proposed future state by identifying control gaps, improvement opportunities, and impacts due to technology implementations, while assessing impacts to other processes/controls, stakeholders and systems.
• Lead the development of control test scripts ensuring alignment with internal standards and external frameworks and facilitate control test execution
• Support the development of control test automation scripting
• Serve as a subject matter expert across key technology control domains, including information security, IT operations, technology resiliency, and systems delivery
• Support ongoing monitoring of compliance with policies and standards, and assist in promoting and reinforcing adherence across the organization
• Contribute to the identification and assessment of technology risks and controls across the enterprise
• Evaluate the adequacy of issue remediation plans and validate control design and operating effectiveness
• Lead and facilitate stakeholder meetings, walkthroughs, workshops and reviews of deliverables.
• Develop collaborative partnerships and provide leadership across a variety of stakeholder groups, ensuring that information collected from multiple sources is critically evaluated, conflicts are resolved, information is clearly communicated at the appropriate level of detail, and requests are distinguished from the underlying business needs with the goal of driving to consensus.

Must haves:

• Experience working on Information Security or Technology Risk projects is a must-have asset. These may include projects focused on delivery of solutions related to Technology Risk Management, Information Security, Identity and Access Management, Governance Risk and Compliance.
• Experience and proficiency with consolidated internal control frameworks mapped to industry frameworks such as ICOFR, NIST, IFRS17, OSFI, SOC2, ISO, CIS, SWIFT, PCI.
• Experience with ServiceNow IRM is preferred
• 5-10 years’ experience as a business process and/or systems analyst documenting the following: process maps and workflow diagrams, RACI matrices, compliance requirements, and gap analysis
• Experience with IT project methodologies, processes, and practices; experience in both waterfall and agile methodologies is an asset.

Disclaimer:
AI may be used in evaluating candidates.
This posting is for an existing vacancy.