Technology, Governance & Risk Analyst

BCI; Victoria; Hybrid; CAD 103,000 - 124,000; Full time

Job summary

A leading investment management firm is seeking a Technology Governance & Risk Analyst. This position emphasizes developing governance frameworks and ensuring organizational compliance with risk management processes. Ideal candidates possess a Bachelor’s degree and 3+ years in governance or risk management. The role is based in Victoria or Vancouver, with an annual salary range of CAD $103,000 to $124,000, and offers comprehensive benefits.

Benefits

Comprehensive health & dental benefits

Defined benefit pension plan

Paid time off

Performance-based incentive plan

Qualifications

• Minimum of 3+ years of experience in enterprise or technology risk management.
• Understanding of industry frameworks such as CIS, NIST, ISO, etc.
• Knowledge of risk assessment design.

Responsibilities

• Deliver comprehensive governance and risk program.
• Conduct risk assessments and support development of governance directives.
• Produce governance and risk reporting regularly.

Skills

Business consulting

Technical writing

Risk management

Communication skills

Education

Bachelor’s degree in relevant field

Tools

CIS

NIST

ISO

ITIL

COBIT

Job description

About Us

With $295.0 billion of gross assets under management, as of March 31, 2025, British Columbia Investment Management Corporation (BCI) is the provider of investment management services for British Columbia’s public sector and one of the largest asset managers in Canada. BCI seeks investment opportunities around the world and across a range of asset classes that convert savings into productive capital. Our investment returns play a significant role in helping our institutional clients build a financially secure future for their beneficiaries.

Headquartered in Victoria, British Columbia, and with teams spanning Vancouver, New York, London, and Mumbai.

BCI integrates environmental, social, and governance (ESG) factors into all investment decisions to meet clients’ risk and return requirements. Our people shape employee-focused initiatives, creating a strong culture. To learn more about our culture and values, visit the BCI Values in Action page.

POSTING CLOSE DATE: Until Filled

The Opportunity

Technology Governance & Risk Analyst – the role emphasizes technology governance and making related governance processes and documents aligned to our objectives and easily understood and accessible to our organization. Candidates with business consulting, implementation of governance programs, or audit backgrounds are particularly encouraged to apply.

Are you passionate about building robust governance frameworks and driving organizational risk management? Do you find satisfaction bringing governance to life in a way that is business centric, agile and user-friendly? BCI is seeking a Technology Governance & Risk Analyst to develop and implement our technology governance framework – providing expertise and guidance to mature our practices to achieve business value while mitigating risk, all in a way that is engaging and accessible. This role is ideal for professionals with governance, business consulting, audit, or compliance backgrounds who want to make a meaningful impact within a leading institutional investment management firm. You'll work across all levels of the organization, contribute to strategic initiatives, and have opportunities for career progression.

The position can be based in either Vancouver or Victoria with travel between the two cities.

Who You Will Work With

• Technology department – BCI’s innovation catalyst and digital transformation engine, pioneering the future of institutional investment through cutting‑edge technology solutions. We architect next‑generation platforms powered by AI and cloud‑native technologies that drive investment excellence and operational efficiency.
• As a strategic partner across all areas of BCI’s business, we don't just implement technology – we envision breakthrough digital experiences of the future. Our department leads digital transformation initiatives, creates intelligent automation solutions, and builds secure, scalable infrastructure that supports everything from identifying investment opportunities and decision‑making, portfolio management to risk analysis, trade processing and regulatory reporting.
• We cultivate digitally empowered workplaces through advanced collaboration ecosystems and productivity platforms, enabling our Technology and business teams to thrive in tomorrow’s investment landscape.

What You Bring

• Bachelor’s degree in Business Administration, Public Administration, Finance or Information Systems / Computer Science, or a related field.
• A minimum of 3+ years of experience in enterprise or technology risk management or governance/policy development and implementation.
• Understanding of and experience working with an organization to align with one or more industry frameworks such as CIS, NIST, ISO, ITIL, COBIT, SOC, etc.
• Knowledge of risk assessment design and delivery against applicable industry frameworks and maturity models.
• Hands‑on experience writing and communicating clear and concise directives, processes and procedures, preferably for technology.
• Must have excellent verbal and written communication, technical writing, presentation skills, listening skills, and problem‑solving skills.
• Professional certifications in risk management, governance and compliance (i.e., CGEIT, CRISC, etc.) or willingness to obtain one is an asset.
• Passionate about continuous learning.

What You Will Do

The Technology Governance & Risk Analyst is responsible for delivering a comprehensive governance and risk program. The Analyst will conduct risk and gap assessments within the Technology department, monitor progress and results, and support development of technology‑related governance and risk directives, processes and procedures.

• Develop and implement a technology governance and risk management program to protect and ensure the integrity of the organization’s data, environments and systems while achieving strategic objectives.
• Support internal teams to assess their current and target state maturity and implement resulting plans.
• Maintain and enhance the program based on internal requirements, external regulations and industry best practices (i.e., COBIT).
• Collaborate with internal teams to develop, implement and maintain technology governance directives, standards and procedures, including risks that may result from partners and suppliers.
• Lead the publication, communication and change management efforts needed to ensure technology directives, standards and procedures are accessible and successfully implemented.
• Conduct technology governance and risk assessments, and work with internal teams on risk identification and mitigation.
• Capture risks in a register, establish key risk indicators, and refresh metrics to identify trends and emerging risks.
• Produce governance and risk reporting on a regular and ad‑hoc basis; develop opportunities to automate collection and reporting; lead briefings to ensure proper risk tracking and management.
• Co‑ordinate Technology department responses to internal audits and work with internal teams to align management responses with criteria and timelines.
• Support the organization’s ability to define acceptable levels of technology‑related risk, respond to governance and risk queries, and advise other teams on impact and requirements.
• Act as a subject‑matter expert and provide ad‑hoc training and guidance to enable and increase adoption of proactive risk mitigation behaviours.
• Ensure artifacts are accurate, accessible, maintained and communicated.
• Undertake special projects or assignments as required.
• Perform other related duties as required.

Where You Will Work

Work from either of our downtown Victoria or Vancouver offices (strong preference for the role to be based in Victoria). Relocation support is available if needed.

Salary Range

The annualized base salary range for this role is CAD $103,000 to $124,000.

BCI offers a competitive total rewards package, including a performance‑based incentive plan, comprehensive health & dental benefits, a defined benefit pension plan, and paid time off. We pay our people competitively in the markets in which we operate and with consideration for internal equity and job structure. The base salary will consider factors such as the individual’s skill set, experience, and internal equity. We aim for actual pay to be around the market median for expected performance and the upper quartile for excellent performance. Actual salaries may vary based on experience and expertise.

Next Steps

To apply online, please submit your resume promptly. Applications will be actively reviewed, and those selected for an interview will be contacted. We welcome all qualified candidates who are legally authorized to work in the country where this job is located. If you do not have authorization, or if your work permit has restrictions or is due to expire within 12 months, please inform our recruitment team if shortlisted.

At BCI, we value diversity and foster an inclusive culture where all employees can thrive. We are performance and client‑focused, valuing integrity, and we want to know you if you share these values. We recognize that some skills can be learned on the job and encourage everyone to apply. If you require accommodations for the recruitment process, such as alternate formats of materials or accessible meeting rooms, please contact us at [e-mail].

To learn more about working with BCI, including our comprehensive benefits packages, our commitment to equity, diversity and inclusion and the recruitment process, visit the BCI Careers Page.

BCI does not accept unsolicited resumes or candidate submissions from third‑party recruitment agencies, executive search firms, or staffing suppliers unless they have an existing contractual agreement with our organization. Our approved vendor relationships are established for particular recruitment requirements and do not extend to general job postings on our website or other platforms. Any candidate information or resumes submitted by suppliers not approved by BCI will be deemed unsolicited and will not be reviewed or considered. BCI will not be liable for any fees, commissions or charges related to unsolicited candidate submissions or recruitment services.