SPECIALIST, IT RISK MANAGEMENT - Montreal, Toronto, Calgary and Vancouver

Business Development Bank of Canada; Montreal; Hybrid; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Savings plan

Defined benefit pension

Wellness & health care spending

Paid vacation

Personal days

Sick days

Hybrid work model

Learning and development

Job summary

Business Development Bank of Canada is seeking an experienced Operational Risk Manager to strengthen the information security and technology risk framework. You will advise stakeholders, challenge risk assessments, and help embed risk governance across the organization.

The role requires a Bachelor's degree and at least five years in technology risk management, with strong Excel and Power BI skills, plus bilingual English/French communication.

Qualifications

• Bachelor’s degree in IT, business, or a related discipline.
• Minimum five years in technology risk management or related fields.
• Experience reviewing IT and information security risks.
• Strong analytical and quantitative abilities; bilingual in English and French.
• Advanced Excel and Power BI skills.

Responsibilities

• Support first- and second-line risk programs (RCSA, KRI, BCM).
• Review and challenge IT and information security risk assessments.
• Monitor remediation plans and risk mitigations.
• Develop and maintain ORM governance documents and methodologies.
• Coach and mentor junior team members and present to senior management.

Skills

Strong analytical skills

Excellent communication

bilingual English/French

Education

Bachelor's degree

Tools

Excel

Power BI

Microsoft Office Suite

Job description

We are banking at another level. Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs. Choosing BDC as your employer also means:

• Employee Savings and Investment Plan where BDC matches part of your voluntary contributions,
• Defined Benefit Pension Plan,
• $750 wellness and health care spending account,
• paid vacation each year,
• five personal days,
• sick days as necessary,
• our offices are closed from December 25 to January 1,
• hybrid work model that truly balances work and personal life,
• opportunities for learning, training and development.

Explore the BDC Way in our Culture Book

POSITION OVERVIEW

As part of the Operational Risk Management (ORM) team, you will help strengthen the organization's ability to identify, assess, monitor, and manage Information Security (InfoSec) and Information Technology (IT) risks. You will act as a subject matter expert in operational risk and technology risk management, providing oversight, challenge, and guidance to stakeholders across the organization. Your work will contribute directly to the effectiveness and evolution of BDC’s operational risk framework while supporting strategic and digital transformation initiatives.

CHALLENGES TO BE MET

• Support first- and second-line stakeholders in the execution of Operational Risk Management programs, including: Risk and Control Self-Assessments (RCSA); Key Risk Indicators (KRI); Operational Risk Events; Business Continuity Management (BCM); Risk Appetite activities; New product, project, and business initiative risk assessments.
• Review and challenge Information Security and Technology risk assessments completed by the first line of defence.
• Review and challenge operational risk events related to Information Security and Technology.
• Monitor remediation activities and action plans to ensure risks are addressed effectively.
• Recommend enhancements to technology risk assessment methodologies, processes, and tools.
• Support the continuous improvement of ORM practices to align with operational realities and industry best practices.
• Manage ORM reporting activities, including: Data collection and analysis; Risk reporting; Action plan tracking; Committee and governance presentations.
• Develop and maintain relationships with key stakeholders, including first-line leadership, second-line risk functions, and senior management.
• Develop, maintain, and enhance ORM governance documents, procedures, and methodologies.
• Coach and mentor junior team members to strengthen overall ORM capabilities.
• Contribute to initiatives that support BDC’s mission of helping Canadian entrepreneurs succeed while maintaining sound risk management practices.

WHAT WE ARE LOOKING FOR

Required Qualifications

• Bachelor’s degree in Information Technology, Communications, Business Administration, Social Sciences, or a related discipline.
• Minimum five (5) years of experience in one or more of the following areas: Technology Risk Management; Technology Resilience; Technology Audit; Information Security Risk Management; Related risk management disciplines.
• Demonstrated expertise in at least one of the following domains: IT Operations; Information Security (InfoSec); Data Risk Management; Digital Technology Risk; Emerging Technology Risk.
• Knowledge of governance, risk, and control frameworks, including the Three Lines of Defence model.
• Experience reviewing, assessing, and challenging technology and information security risks.
• Experience monitoring remediation plans, corrective actions, and risk mitigation activities.
• Ability to analyze complex business requirements and translate them into risk management considerations.
• Strong analytical and quantitative skills.
• Advanced Microsoft Excel skills.
• Excellent written and verbal communication skills in both French and English.
• Experience preparing and delivering presentations to stakeholders and senior leaders.
• Ability to work effectively with senior stakeholders and provide credible challenge when required.
• Ability to manage multiple priorities and work in a fast-paced environment.
• Strong planning, coordination, organization, implementation, and training skills.
• Demonstrated judgment in identifying, escalating, and mitigating risks that may impact business operations.
• Ability to meet deadlines and work effectively in a multicultural and bilingual environment.
• Proficiency with: Microsoft Word; Microsoft PowerPoint; Microsoft Visio; Microsoft Office Suite.
• Ability to build trusted relationships with internal stakeholders.
• Ability to clearly explain risk management initiatives and gain stakeholder engagement.
• Demonstrated ability to leverage AI tools to improve efficiency and enhance the quality of work products.

Preferred Qualifications

• Master’s degree or equivalent combination of advanced education and relevant experience.
• Professional certifications in Risk, Governance, Audit, or Information Security, such as: CRISC (Certified in Risk and Information Systems Control); CISM (Certified Information Security Manager); CISA (Certified Information Systems Auditor); CISSP (Certified Information Systems Security Professional); COBIT; Open FAIR.
• Experience in the banking, financial services, or regulated industry sector.
• Experience with Power BI reporting, analytics, and dashboard development.
• Experience supporting digital transformation, technology modernization, or enterprise risk initiatives.
• Continuous improvement mindset with demonstrated experience enhancing risk management processes and methodologies.

#INDHP Proudly one of Canada’s Top 100 Employers and one of Canada’s Best Diversity Employers, we are committed to fostering a diverse, equitable, inclusive and accessible environment where all employees can thrive and feel empowered to bring their whole selves to work.

If you require an accommodation to complete your application, please do not hesitate to contact us at [e-mail].

While we appreciate all applications, we advise that only the candidates selected to participate in the recruitment process will be contacted.

BDC is a bank unlike any other. We are the only bank dedicated exclusively to the development of Canadian businesses. The only institution whose purpose is to promote the growth of the Canadian economy by focusing on the success of small and medium-sized businesses, with a human touch and a genuine presence. At BDC, we’re changing people’s and businesses’ lives for the better. That’s what makes us unique as a bank. That’s why we are banking at another level.