Specialist, IT Risk

Canada Mortgage and Housing Corporation; Montreal, Ottawa; On-site; CAD 84,000 - 106,000; Full time

Job summary

A national housing organization in Montreal seeks an IT Risk Specialist to assess risks and ensure alignment with their Risk Management Framework. Responsibilities include developing action plans, conducting risk assessments, and providing training. Ideal candidates will have a bachelor’s degree, five years of relevant experience, and strong analytical skills. This role offers a salary range of $84,699 to $105,873 along with comprehensive benefits.

Benefits

Annual Paid vacation

Performance incentive

Comprehensive insurance

Professional development support

Inclusive workplace culture

Qualifications

• Minimum of five years experience in Risk and/or Audit.
• Experience in assessing governance, work processes, controls, and/or risk management.
• Familiarity with security standards and regulations desired.

Responsibilities

• Assess and interpret data for IT risk.
• Develop action plans for oversight and audit findings.
• Provide risk management expertise for business systems.

Skills

Analytical skills

Problem solving

Project management

Communication skills

Education

Bachelor’s degree in Computer Science or related field

Job description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert:

Travel Requirement:Travel not required

Language Skill Levels (Read/Write/Speak):ZZZ

Security Requirement: Secret

Salary:Our salaries generally range from $84699.11to $105873.89and are based on qualifications and experience.

About CMHC

The work you do and the work we do together matters. We come to work every day with a common purpose: to contribute to a well-functioning housing system.

At CMHC, we hold ourselves accountable for our results and support our colleagues in their achievements. We thrive on collaboration, connecting across CMHC and involving the right people to get our work done. Our leadership style is guided by trust, where our leaders favour an adaptive approach based on the needs of their teams.

Join us and be part of a team that's committed to making a real difference and be part of something meaningful.

What’s in it for you

We’ve got the purpose, the people and the perks you need for a fulfilling career. Here’s the comprehensive and generous benefits you get when you’re a permanent employee:

• Annual Paid vacation.
• Annual individual performance incentive.
• Comprehensive group insurance plan to support your well-being from day one.
• Support towards your personal and professional growth with training, mentorship and more.
• An inclusive workplace culture and environment.

About the role

Join the Information & Technology (IT) Risk and Compliance team, in the Specialist, IT Risk position. As the IT Risk Specialist, you will be responsible for assessing and interpreting data to determine the level of risk and other indicators of risk, ensuring the Risk Management Framework is aligned with CMHC’s operations and technology, reviewing Audit's schedule and their findings, and recommending actions to fill any observed gaps. You will also be promoting a culture of risk awareness and providing training in risk management (i.e. internal and external control procedures and risk mitigation practices).

What you’ll do:

• Developing action plans that addresses all upcoming activities, oversight and/or audit findings and gaps and monitors progress against action plans (including purpose, scope, timelines, etc.).
• Planning and executing various tasks such as: risk assessments, risk event reporting, control testing, security standard maturity assessments, deficiency identification and remediation, risk training, corporate and sector specific business continuity planning, lender attestations, compliance attestations and risk scenario analysis.
• Creating and implementing analytical models for risk assessment, including the assessment and interpretation of data to determine risk concentration.
• Reviewing draft oversight and/or audit reports/recommendations, obtaining feedback and completing a reconciliation report of recommendations.
• Providing risk management expertise for the ongoing maintenance and enhancement of business systems, technologies and processes.
• Conducting research on best practices and recommend changes to current risk policies, procedures, standards and guidelines.
• Communicating and collaborating with other oversight functions on results of risk management activities within the sector.
  

What you should have:

• A bachelor’s degree preferably in Computer Science, Management Information Systems, Finance, Business Administration, Commerce, or in another related field.
• A minimum of five (5) years of increasing responsibilities and experience in Risk and/or Audit.
• A demonstrated experience in assessing and reviewing governance, work processes, controls and/or risk management, including IT General Controls testing.
• Experience and/or knowledge within three or more of the following risk domains: Audit management, Risk management, Compliance management, Cybersecurity; Cloud technologies; Business continuity management and disaster recovery; Data governance and information management; and Vendor management.
• A knowledge of operational risk management framework, risk management policy development and knowledge of internal control concepts and frameworks.
• A familiarity with common security standards and regulations (ISO 27001, ISO 27001 SOX, PIPEDA/GDPR, CCPA, COBIT, NIST 800-53 and SOC2 reporting) is desired but expertise will be preferred.
• Strong analytical, problem solving, and project management skills with the ability to undertake complete multiple, concurrent tasks.
• Strong oral and written communication skills, including the ability to deliver professional advice or direction or present opinions and recommendations to a variety of audiences (technical and non-technical).
  

It would be great if you also had:

• A professional designation in Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Certified in the Governance of Enterprise IT (CGEIT), Professional Accounting (CPA), Certified Internal Auditor (CIA) or other relevant licence, designation, or certificate.
• A demonstrated experience in working for financial institutions or insurance industries.
• Bilingualism (English and French).
  

Posting closing date: Note, the competition will remain active until filled.

Our commitment to diversity, equity, and inclusion

We’re committed to employment equity and encourage women, Indigenous Peoples, persons with disabilities, veterans and persons of all races, ethnicities, religions, abilities, sexual orientations, and gender identities and expressions to apply. We also welcome applications from non-Canadians who are eligible to work in Canada.

CMHC is an inclusive workplace where diversity of thought – and of people – are recognized, valued, and considered essential to achieving our mission.

We know that applying for a new job can be both exciting and daunting, and we appreciate your effort. Learn more about our hiring process . If you are selected for an interview or testing, please advise us if you require an accommodation.

If you applied before and you were not successful don’t worry – we're always posting new positions, so don’t hesitate to give it another shot. We’re excited to see what you bring to the table this time around!