This job board retrieves part of its jobs from: Emploi Étudiant | Toronto Jobs | Work From Home

Tech jobs every day in Canada!

To post a job, login or create an account |  Post a Job

   Canadian Tech jobs   

Website updated every day with fresh jobs in the IT industry

Slide 1
Slide 2
Slide 3
previous arrow
next arrow

Manager, Technology Risk Management – Governance & Strategy, Deloitte Global Risk

Deloitte

This is a Contract position in Toronto, ON posted November 4, 2022.

Manager, Technology Risk Management – Governance & Strategy, Deloitte Global Risk Apply now »

Apply now

  • Start applying with LinkedIn
  • Apply Now
  • Start

  • Please wait…

Apply now

× Apply for Job
×

×

×

Enter your email to apply

Date: Nov 3, 2022

Location: Toronto, Ontario, Canada

Company: Deloitte

Job Type: Permanent
Reference code: 117422
Primary Location: Toronto, Ontario, Canada
All Available Locations: Toronto, ON

Our Purpose

At Deloitte, we are driven to inspire and help our people, organization, communities, and country to thrive. Our Purpose is to build a better future by accelerating and expanding access to knowledge. Purpose defines who we are and gives us reason to exist as an organization.

By living our Purpose, we will make an impact that matters.

  • Enjoy flexible, proactive, and practical benefits that foster a culture of well-being and connectedness.
  • Experience a firm where wellness matters.
  • Be expected to share your ideas and to make them a reality

Do you thrive on developing creative and innovative insights to solve complex challenges? Want to work on next-generation, cutting edge products and services that deliver outstanding value and that are global in vision and scope? Work with premier thought leaders in your field? Work for a world-class organization that provides an exceptional career experience with an inclusive and collaborative culture?

What will your typical day look like?

Strategic

  • Align with leadership and actively contribute to the development, implementation, and maintenance of a firm’s technology risk management strategy, methodology and culture.
  • Gain awareness of new and emerging technologies being deployed and help ensure risk assessment processes are appropriately applied.
  • Actively contribute to the development of best practices to be used by the broader team, based on research and industry best practices in regulatory and risk governance matters.
  • Help keep the team’s knowledge up to date so that risk management best practices can be recommended to and used by colleagues across levels, including executive management.
  • Foster and encourages an agile mind set to enable effective technology risk management while driving adaptability to ongoing changes in technologies, risks, regulations, and stakeholder expectations.
  • Foster and encourages continuous learning and development of the team members through personal examples, to stay well-informed in the knowledge domains relevant to technology risk management.

Operational:

  • Serve as a subject matter expert to technology functions for technology risk management requirements according to regulatory requirements, firm policy, client commitments, etc.
  • Responsible for continuously improving and updating the technology risk management program, and controls monitoring.
  • Manage notification of updated controls requirements to technology functions due to regulatory and firm policy updates.
  • Provide input into the annual strategic planning and budget processes for technology risk management program.
  • Identify and put in place the systems and tools, protocols, analysis methodology and reporting processes necessary to identify, analyze, quantify, monitor and mitigate / control technology risks.
  • Facilitate cross-disciplinary coordination for risk analysis, remediation scoping, reporting and engagement with stakeholders.
  • Manage various technology risk management initiatives in accordance with annual objectives and manage multiple complex technology risk management projects throughout the organization.
  • Contribute to the development and continuous improvement of the technology risk management framework to promote the achievement of firm objectives and safeguard the firm’s reputation.
  • Help ensure the maintenance, updating and development of training programs on technology risk management and risk governance, risk reporting for stakeholders to ensure that they are at the leading edge of integrated risk management.
  • As part of cross-training, assist with technology risk assessments and report on findings, consult on remediation plans, track status, aggregate results, and report to management / leadership.
  • As part of cross-training, assist with deep-dive controls testing for high-risk areas within technology for independent validation of issues and remediation efforts.
  • Perform other duties as assigned by the Senior Manager within the Independent IT Risk.

Relationship Management:

Build strong relationships with internal key stakeholders within second line of defense Independent Technology Risk Function, relevant first line of defense Technology Risk Management and technology teams.
Motivate and encourages assigned employees to support and take ownership of IT risk management activities and initiatives to optimize decision quality and exceed expected results.
Manage team member performance by engaging and providing feedback to team members, as well as by communicating the firm’s goals and their role in achieving them.
Foster a diverse and high-performance culture with the right competencies

About the team

Deloitte Global:

At Deloitte, we expect results. Incredible-tangible-results. And Deloitte Global professionals play a unique role in delivering those results. We reach across disciplines and borders to serve our global organization. We are the engine of Deloitte. We develop and lead global strategies and provide programs and services that unite our network. In Deloitte Global, everyone has an opportunity to lead. We see the importance of your perspective and your ability to create value. We want you to fit in-with an inclusive culture, focus on work-life fit and well-being, and a supportive, connected environment; but we also want you to stand out-with opportunities to have a strategic impact, innovate, and take the risks necessary to make your mark. Deloitte Global supports our talented professionals in answering the question: What impact will you make?

Global Risk develops programs, processes, and resources to preserve, protect, and enhance the Deloitte brand around the world. We identify new and emerging risks that might impact the network, mitigate threats as they are identified and proactively engage key stakeholders to develop identification and mitigation procedures.

Enough about us, let’s talk about you

You are someone with:

  • Bachelor’s Degree or higher in business administration, a technology-related field, or equivalent education-related experience
  • Five (5) or more years of demonstrated experience in developing and applying leading practices in a large-scale Information Security,
  • Technology Risk or Operational Risk environments, including strategy development and execution, risk and governance experience.
  • Experience in highly regulated industries is preferred.
  • Two (2) or more years of people management experience and proven leadership and coaching abilities.
  • Working knowledge of GRC tools (e.g., ServiceNow, Archer, etc.) and Unified Compliance Framework (UCF).
  • Working knowledge of various IT risk frameworks, methodologies, leading industry/assurance standards and regulations, as well as testation reporting frameworks, such as the ISO family of standards (27001/2, ISO 22301, ISO 27017, etc.), NIST, COBIT, SOC2 reporting framework.
  • Basic knowledge of significant security and privacy laws and regulations in the Americas, Europe, Middle East, Asia, Africa, and Oceania is preferable (e.g., GDPR).
  • Working knowledge in two or more of the following IT and risk domains: cloud hosting, infrastructure, cyber security, secure SDLC, service management, data protection, privacy, IT risk management, maturity assessments, third-party risk management.
  • Working knowledge of emerging IT risks and risk-intelligent adoption of new and existing technologies
  • (Cloud, RPA, Artificial Intelligence) and ways of working (Agile/SAFe) in the context of applicable regulatory requirements and IT delivery model.
  • Experience in developing and applying standards, principles, methods, and leading IT risk governance practices in large-scale Information Security, Technology environments.
  • Experience working and liaising with executives (e.g., CIO, CISO, Directors, Principals) senior management.
  • Analytical and problem-solving mindset; demonstrated ability to synthesize large amounts of data in short periods of time for consumption by multiple stakeholders.
  • Presentation, and interpersonal skills:
  • Highly disciplined, with strong organizational abilities.
  • Ability to multi-task, prioritize work and work independently.
  • Possess exceptional level of integrity and customer focus.
  • Required Licensed or certifications:
  • One or more of CISA, CRISC, CIA, CISM, CISSSP, CGEIT, ISO 27001/2 or similar certifications strongly preferred but equivalent knowledge will be considered.

Our promise to our people: Deloitte is where potential comes to life.

Be yourself, and more.

We are a group of talented people who want to learn, gain experience, and develop skills. Wherever you are in your career, we want you to advance.

You shape how we make impact.

Diverse perspectives and life experiences make us better. Whoever you are and wherever you’re from, we want you to feel like you belong here. We provide flexible working options to support you and how you can contribute. Be the leader you want to be.

Be the leader you want to be

Some guide teams, some change culture, some build essential expertise. We offer opportunities and experiences that support your continuing growth as a leader.

Have as many careers as you want.

We are uniquely able to offer you new challenges and roles – and prepare you for them. We bring together people with unique experiences and talents, and we are the place to develop a lasting network of friends, peers, and mentors. Our TVP is about relationships – between leaders and their people, the firm and its people, peers, and within in our communities.

The next step is yours

At Deloitte, we are all about doing business inclusively – that starts with having diverse colleagues of all abilities. Deloitte encourages applications from all qualified candidates who represent the full diversity of communities across Canada. This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our AccessAbility Action Plan, Reconciliation Action Plan and the BlackNorth Initiative.

We encourage you to connect with us at accessiblecareers@deloitte.ca if you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations). We’d love to hear from you!

By applying to this job you will be assessed against the Deloitte Global Talent Standards. We’ve designed these standards to provide our clients with a consistent and exceptional Deloitte experience globally.
Deloitte Canada has 30 offices with representation across most of the country. We acknowledge our offices reside on traditional, treaty and unceded territories as part of Turtle Island and is still home to many First Nations, Métis, and Inuit peoples. We are all Treaty people.


Job Segment: Compliance, Strategic Planning, Cyber Security, Law, Information Security, Legal, Strategy, Security, Technology

Apply now »

Apply now

  • Start applying with LinkedIn
  • Apply Now
  • Start

  • Please wait…

Apply now

× Apply for Job
×

×

×

Enter your email to apply