Technical Change Risk Manager

Fidelity International; Toronto; On-site; CAD 139,000 - 164,000; Full time

Benefits offered by this job

Remote/hybrid options

RRSP contributions

Health benefits

Parental leave

Home office budget

Job summary

Fidelity Canada is seeking a Technical Change Risk Manager to provide independent risk oversight of complex technology changes, reviews of requirements, designs, code changes, tests, and release artifacts to identify control gaps.

You will work with developers, QA teams, vendors, project teams, and risk owners to ensure robust controls and timely risk remediation in a hybrid Toronto-based role.

Qualifications

• Completion of a university degree or equivalent work experience.
• At least 5 years of experience reviewing code, design docs, requirements, test results, or release evidence to identify risk.
• Experience with technology change management, SDLC practices, and release controls.
• Ability to engage with senior management and diverse stakeholders.

Responsibilities

• Provide independent challenge to changes and releases to identify risk gaps.
• Review requirements, designs, test evidence, and deployment plans for readiness.
• Escalate material issues and recommend remediation actions.
• Participate in post-implementation reviews and continuous improvement discussions.

Skills

Change risk management

Technical review

Risk assessment

Stakeholder communication

Analytical thinking

Education

University degree or equivalent

Tools

ITIL

COBIT

ISO 27001

NIST

Job description

Job Description You will be working on a flexible hybrid schedule as part of Fidelity’s dynamic working arrangement. Current work authorization for Canada is required for all openings. The work location for this role is 483 Bay Street in Toronto until approximately late2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.

Who We Are

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services – and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future. Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best – both personally and professionally.

How You’ll Make an Impact

Reporting to the Director, Risk Management, the Technical Change Risk Manager provides independent risk oversight, technical review, and challenge of complex technology changes, projects, and application releases. The role supports the Change and Project Risk Management program by assessing whether critical technology changes are appropriately designed, coded, tested, documented, approved, and ready for implementation. The role reviews business requirements, technical designs, code changes, test evidence, release documentation, deployment plans, rollback strategies, and post-implementation results to identify control gaps, implementation risks, and release-readiness concerns. The position works with developers, QA teams, vendors, project teams, release managers, and risk owners to challenge risk decisions, elevate material issues, and strengthen technology change controls.

Responsibilities

• Change Risk Monitoring, Technical Review, and Release Readiness Review complex, critical, or high-risk technology changes to ensure risks are identified, assessed, documented, challenged, remediated, or formally accepted.
• Assess change risk and complexity to determine the appropriate level of technical review, challenge, and control activities required prior to release.
• Review business requirements, technical designs, test cases, QA and UAT results, release documentation, and implementation artifacts to confirm completeness, traceability, and alignment with intended business outcomes.
• Assess technical artifacts, data flows, dependencies, and application code where necessary to identify potential weaknesses, including logic errors, hardcoded values, inadequate validation, weak exception handling, data quality issues, and performance concerns.
• Evaluate identified risks with risk owners and assess whether response plans, remediation actions, compensating controls, or risk acceptances are appropriate, robust, and properly documented.
• Escalate material issues as required.
• Provide independent challenge to developers, QA teams, vendors, and project stakeholders where implementation, testing, or release readiness does not meet expectations.
• Assess test strategies, coverage, and evidence to ensure adequate validation of positive, negative, boundary, integration, regression, and operational scenarios.
• Identify gaps in documentation, design, implementation, testing, and release readiness, including unresolved defects, insufficient evidence, or incomplete risk mitigation.
• Review deployment plans, implementation sequencing, rollback strategies, and post-release validation to assess operational readiness.
• Participate in post-implementation reviews, lessons learned, incident reviews, and continuous improvement discussions to identify recurring root causes of change-related issues.
• Promote continuous improvement by identifying recurring issues and recommending enhancements to change risk practices and controls.
• Consistently advocate for strong risk management principles and build trusted relationships with stakeholders.

Program Monitoring, Oversight, and Reporting

Maintain Risk Management programs on a day-to-day basis to identify, monitor, assess, and report on risk. Programs include, but are not limited to, Change and Project Risk Management and ad hoc risk assessments. Ensure program policies, guidelines, standards, and internal procedures are kept current, relevant, and consistently applied. Escalate issues identified through real-time monitoring or formal reviews to the appropriate Risk Management leader. Maintain current program reporting and distribute it to key stakeholders. Identify areas for improvement, recommend remediation actions, and build consensus on solutions. Independently challenge the status quo in a respectful and constructive manner.

Training and Risk Culture

Promote a strong risk culture by clearly communicating risk management policies, programs, expectations, and business roles and responsibilities across the organization. Develop, maintain, and deliver effective training and awareness materials on risk management programs and policies through appropriate formats, including online and in-person sessions. Equip employees and business teams to understand relevant policies, identify and assess material risks, and escalate issues appropriately.

The Expertise You Bring

Knowledge of secure SDLC principles, common application security risks, software delivery controls, and risk or control frameworks relevant to application engineering. Ability to read and assess application code, technical design documents, test evidence, and release artifacts to identify implementation risk and control weaknesses. Strong risk, process, and control assessment skills, including the ability to identify gaps, challenge assumptions, and recommend practical remediation actions. Ability to engage effectively with senior management, operational teams, developers, QA teams, vendors, and project stakeholders. Strong relationship-building, influencing, and negotiation skills across diverse stakeholders and lines of defense. Excellent written and verbal communication skills, including the ability to explain technical and risk issues clearly to non-technical audiences. Excellent analytical, organizational, and project management skills. Ability to manage multiple priorities, adapt to changing circumstances, and work effectively under competing deadlines. Strong attention to detail and ability to respectfully challenge the status quo. Knowledge of secure SDLC principles, common application security risks, software delivery controls, and risk or control frameworks relevant to application engineering.

What We Are Looking For

Completion of a university degree or equivalent work experience. At least 5 years of experience reviewing code, technical design documents, requirements, test cases, QA results, UAT evidence, release packages, or production implementation evidence to identify potential control weaknesses and risk exposures. At least 5 years of experience understanding of technology change management, software delivery lifecycle practices, release readiness, and production implementation controls. At least 5 years of experience of ability to assess whether technology changes are appropriately designed, tested, documented, approved, and supported by adequate risk mitigation.

Nice to Have

• Knowledge of financial services products, processes, controls, and regulatory expectations.
• Familiarity with risk and control frameworks such as ITIL, COBIT, ISO 27001, NIST, SOX ITGC, secure SDLC, or operational resilience frameworks.
• Experience with AI, machine learning, Agile delivery, cloud environments, or DevOps / CI/CD practices.
• Relevant certifications such as CISA, CRISC, CISSP, CSSLP, ITIL, cloud certifications, or similar credentials.

Some of the ways we’ll help you feel valued and supported as part of our team

• Flexible working arrangements - 100% remote, hybrid, and in office options
• Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
• Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $6000 annually for mental health services and therapy
• Parental leave top-up to 100% of your salary for a period of 25 weeks
• Up to $650 for home office equipment
• Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
• Diversity and inclusion programs, including an active network of Employee Resource Groups
• Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation
• We care a lot about fostering a compassionate, people‑centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.
• We believe exceptional work deserves exceptional recognition.

Total Rewards That Reflect Your Impact

Base Salary and discretionary Performance Bonus: Total annual cash compensation (base salary plus target bonus) ranges from $139,000 to $164,000 based on experience and qualifications. RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution—no employee matching required. We’re proud to offer a compensation package that aligns with provincial pay transparency requirements.

Fidelity Canada is an equal opportunity employer

Fidelity Canada is an equal opportunity employer Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground. Accommodation during the application process Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at [e-mail].

Why Work at Fidelity?

We are proud to be recipients of the following:

• Canada’s Top 100 Employers
• Greater Toronto's Top Employers
• Canada’s Top Family-Friendly Employers
• Canada’s Top Employers for Young People
• Great Place To Work® Certified
• Best Workplaces for Inclusion
• Best Workplaces for Mental Wellness
• Best Workplaces for Today's Youth
• Best Workplaces for Women
• Best Workplaces in Financial Services & Insurance
• Best Workplaces in Ontario
• Best Workplaces with Most Trusted Executive Teams
• LinkedIn Top Companies in Canada
• Human Resource Director (HRD) - Best Place To Work
• HRD - 5-Star Benefit Program
• HRD - 5-Star Diversity & Inclusion Employer Designations
• Canadian Compassionate Companies – Certified
• Benefits Canada's Workplace Benefits Award - Future of Work Strategy
• TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
• Canadian HR Reporter's Most Innovative HR Team

About Us

Fidelity Canada has become an employer of choice for talented people seeking rewarding career opportunities in the financial services industry. We look to hire outstanding individuals who want to maximize their potential and be challenged in all aspects of their professional careers. To help our employees excel in their roles at Fidelity, we provide everyone here with the best training, resources and support possible throughout their careers. With our help, there’s no limit to what you can accomplish here. We’re excited you’re considering Fidelity for your career plans. Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at [e-mail] Fidelity respects the privacy of your information.