Technology Risk and Control Specialist

Compunnel, Inc.; Montreal; On-site; CAD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a detail-oriented Technology Controls Analyst to enhance its technology risk management framework. In this pivotal role, you will collaborate with key stakeholders to assess, design, and optimize controls that safeguard the organization's technology landscape. Your contributions will directly support the execution of critical risk and control processes, ensuring compliance with financial regulations and industry standards. This position offers the chance to engage in a high-visibility program aimed at aligning with evolving regulatory expectations, making it a perfect fit for those passionate about technology risk and governance.

Qualifications

• Solid awareness of financial regulations affecting Technology and Cybersecurity.
• Strong analytical skills with a focus on accuracy and data-driven insights.

Responsibilities

• Support the CRO in managing the risk and control life cycle for Technology.
• Collaborate with Technology teams to test controls and ensure compliance.

Skills

Analytical Skills

Interpersonal Skills

Communication Skills

Organizational Skills

Self-starter

Education

Bachelor's Degree in a related field

Tools

Microsoft Office

COBIT

ISO 27001

NIST

ITIL

Job description

The Technology Risk, Governance and Controls (TRGC) department at Client is seeking a detail-oriented and driven Technology Controls Analyst to join its Technology Controls Group. This role is central to supporting the design, implementation, and evolution of control processes that secure the firm’s global technology landscape.

You will work closely with the Controls Risk Officer (CRO) and other stakeholders across multiple lines of defense to help assess, design, and optimize controls related to Technology, Information Security, and Cyber Security. This is an exciting opportunity to be involved in a high-visibility, strategic enhancement program designed to align with the firm’s risk appetite and evolving regulatory expectations.

Key Responsibilities:

• Support the CRO in managing end-to-end risk and control life cycle for a specific Technology domain.
• Assist in the development and documentation of risk and control change artifacts ensuring first-time-right quality and completeness.
• Maintain up-to-date records of risks, controls, governance documentation, issues, and remediation action plans.
• Contribute to the continuous improvement of control testing, measurement, and monitoring, with an emphasis on automation and metrics.
• Support the execution of the Risk and Control Self-Assessment (RCSA) process by identifying control gaps or enhancements.
• Collaborate with Technology teams to test controls, ensure compliance, and support readiness for audits and internal reviews.
• Analyze control performance data and escalate emerging risks or weaknesses in a timely manner.
• Engage with internal stakeholders to coordinate risk reporting, updates, and internal communications.
• Produce regular Technology risk and control commentary/reports for leadership and governance forums.
• Provide operational support for project-based risk and control initiatives, meeting established deadlines and milestones.

Required Skills & Qualifications:

• Solid awareness of financial regulations and global compliance requirements affecting Technology, Cybersecurity, and IT Risk.
• Familiarity with industry-standard risk frameworks such as COBIT, ISO 27001, NIST, ITIL.
• Experience drafting Technology-related policies, standards, and procedures.
• Strong analytical skills with a focus on accuracy, data-driven insights, and reporting.
• Excellent organizational skills with the ability to prioritize multiple tasks and manage shifting priorities.
• Proficient in Microsoft Office (Excel, PowerPoint, Word, Outlook).
• Strong interpersonal skills and effective stakeholder engagement across all levels of an organization.
• Excellent communication skills—both written and verbal—with high proficiency in English.
• Self-starter with the ability to work independently or collaboratively in a global, matrixed environment.

Preferred Qualifications:

• Prior experience in Technology Operations, IT Risk Oversight (2LOD), or Audit within a financial institution.
• Familiarity with automated control testing and continuous control monitoring tools.
• Exposure to Governance, Risk and Compliance (GRC) platforms or tooling.
• Background working in regulated environments with a focus on technology resilience and risk mitigation.