Technology, Governance & Risk Analyst

BCI Corporation; Victoria; Hybrid; CAD 103,000 - 124,000; Full time

Job summary

A leading investment management firm in Victoria is seeking a Technology Governance & Risk Analyst to enhance their governance framework. This role involves conducting risk assessments, developing directives, and collaborating across teams to promote effective risk management practices. Ideal candidates will possess a BA degree and experience in technology risk management. The role comes with competitive pay and a commitment to professional growth.

Benefits

Performance-based incentive plan

Comprehensive health & dental benefits

Defined benefit pension plan

Paid time off

Qualifications

• Minimum of 3+ years of experience in enterprise or technology risk management.
• Understanding of industry frameworks such as CIS, NIST, ISO is required.
• Certifications in risk management and governance are an asset.

Responsibilities

• Deliver a comprehensive governance and risk program.
• Conduct risk and gap assessments within the Technology department.
• Collaborate with teams to ensure technology governance directives are implemented successfully.

Skills

Excellent verbal and written communication

Technical writing skills

Problem-solving skills

Risk assessment and management

Compliance and governance knowledge

Education

Bachelor’s degree in Business Administration or related field

Job description

About Us :

With $295.0 billion of gross assets under management, as of March 31, 2025, British Columbia Investment Management Corporation (BCI) is the provider of investment management services for British Columbia’s public sector and one of the largest asset managers in Canada. BCI seeks investment opportunities around the world and across a range of asset classes that convert savings into productive capital. Our investment returns play a significant role in helping our institutional clients build a financially secure future for their beneficiaries.

Headquartered in Victoria, British Columbia, and with teams spanning Vancouver, New York, London, and Mumbai.

BCI integrates environmental, social, and governance (ESG) factors into all investment decisions to meet clients' risk and return requirements. Our people shape employee-focused initiatives, creating a strong culture. To learn more about our culture and values, visit our page.

POSTING CLOSE DATE :

Until Filled

THE OPPORTUNITY

This role emphasizes technology governance and making related governance processes and documents aligned to our objectives and easily understood and accessible to our organization — candidates with business consulting, implementation of governance programs, or audit, backgrounds are particularly encouraged to apply.

Are you passionate about building robust governance frameworks and driving organizational risk management? Do you find satisfaction bringing governance to life in a way that is business centric, agile and user-friendly? BCI is seeking a Technology Governance & Risk Analyst to develop implement our technology governance framework— providing expertise and guidance to mature our practices to achieve business value while mitigating risk, all in a way that is engaging and accessible. This role is ideal for professionals with governance, business consulting, audit compliance backgrounds, who want to make a meaningful impact within a leading institutional investment management firm. You'll work across all levels of the organization, contribute to strategic initiatives, and have opportunities for career progression.

The position can be based in either Vancouver or Victoria with travel between the two cities.

WHO YOU WILL WORK WITH

The Technology department is BCI's innovation catalyst and digital transformation engine, pioneering the future of institutional investment through cutting‑edge technology solutions. We architect next‑generation platforms powered by AI and cloud‑native technologies that drive investment excellence and operational efficiency.

As a strategic partner across all areas of BCI's business, we don't just implement technology—we envision breakthrough digital experiences of the future. Our department leads digital transformation initiatives, creates intelligent automation solutions, and builds secure, scalable infrastructure that supports everything from identifying investment opportunities and decision‑making, portfolio management to risk analysis, trade processing, and regulatory reporting.

We cultivate digitally empowered workplaces through advanced collaboration ecosystems and productivity platforms, enabling our Technology and business teams to thrive in tomorrow's investment landscape.

WHAT YOU BRING

• Bachelor’s degree in Business Administration, Public Administration, Finance, Information Systems / Computer Science, or a related field
• A minimum of 3+ years of experience in enterprise or technology risk management or governance / policy development and implementation
• Understanding of and experience working with an organization to align with one or more industry frameworks such as CIS, NIST, ISO, ITIL, COBIT, SOC, etc.
• Knowledge of risk assessment design and delivery against applicable industry frameworks and maturity models
• Hands‑on experience writing and communicating clear and concise directives, processes, and procedures, preferably for technology
• Must have excellent verbal and written communication, technical writing, presentation skills, listening skills, and problem‑solving skills
• Professional certifications in risk management, governance, and compliance (i.e., CGEIT, CRISC, etc.), or willingness to obtain one is an asset
• Passionate about continuous learning

WHAT YOU WILL DO

• The Technology Governance & Risk Analyst is responsible for delivering a comprehensive governance and risk program.
• The Technology Governance & Risk Analyst conducts risk and gap assessments within the Technology department, and monitors and measures action plans, progress, and results and supports the development of technology‑related governance and risk directives, processes, and procedures.
• Develops and implements a technology governance and risk management program to ensure the protection and integrity of the organization’s data, environments, and systems while achieving the organization’s strategic objectives.
• Supports internal teams to assess their current and target state maturity and implement resulting plans.
• Maintains and enhances the program based on internal requirements, external regulations, and industry best practices (i.e., COBIT).
• Collaborates with internal teams to develop, implement, and maintain technology governance directives, standards and procedures, including risks that may result from the organization’s partners and suppliers.
• Leads the publication, communication, and supports the change management efforts needed to ensure that the technology directives, standards, and procedures are accessible so that these can be implemented successfully by internal teams.
• Conducts technology governance and risk assessments based on the directives, processes and procedures, and works with internal teams on risk identification and mitigation.
• Captures risks in a risk or audit register, establishes the key risk indicators (KRI) used to measure, monitor and track risks and mitigation action plans, and refreshes metrics to identify trends and possible new emerging risks.
• Produces governance and risk reporting on a regular and ad‑hoc/ as‑requested basis and develops opportunities to automate the collection and reporting process. Leads regular briefings to ensure proper risks are tracked and managed appropriately.
• Co-ordinates the Technology department responses to internal audits and then works with internal teams to align management responses and meet response criteria and timelines.
• Supports the organization’s ability to define acceptable levels of technology‑related risk, responds to governance and risk queries from other teams, and advises other teams on governance and risk impact, needs, or requirements relating to their activities and initiatives.
• Acts as a subject matter expert and provides support, ad‑hoc training and guidance to others to enable and increase the adoption of proactive and positive risk mitigation behaviours.
• Ensures artifacts are accurate, accessible, maintained and communicated.
• Undertakes special projects or assignments as required.
• Performs other related duties as required.

WHERE YOU WILL WORK

Work from either of our downtown Victoria or Vancouver offices (strong preference for the role to be based in Victoria) : relocation support is available if needed.

SALARY RANGE

The annualized base salary range for this role is CAD $103,000 to $124,000.

BCI offers a competitive total rewards package, including a performance‑based incentive plan, comprehensive health & dental benefits, a defined benefit pension plan, and paid time off. We pay our people competitively in the markets in which we operate and with consideration for internal equity and job structure. The base salary will consider factors such as the individual's skill set, experience, and internal equity. We aim for actual pay to be around the market median for expected performance and the upper quartile for excellent performance. Actual salaries may vary based on experience and expertise.

Next Steps :

To apply online, please submit your resume promptly. Applications will be actively reviewed, and those selected for an interview will be contacted. We welcome all qualified candidates who are legally authorized to work in the country where this job is located. If you do not have authorization, or if your work permit has restrictions or is due to expire within 12 months, please inform our recruitment team if shortlisted.

At BCI, we value diversity and foster an inclusive culture where all employees can thrive. We are performance and client‑focused, valuing integrity, and we want to know you if you share these values. We recognize that some skills can be learned on the job and encourage everyone to apply. If you require accommodations for the recruitment process, such as alternate formats of materials or accessible meeting rooms, please contact us.