Manager, Technology Risk Management

Manager, Technology Risk Management – KPMG Canada Overview

At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause turning insight into opportunity for clients and communities around the world. Our Technology Risk Management group in Business Enablement Services is looking for a Risk Manager to join our team. The Technology Risk Management group oversees how the firm manages risk in deploying technology.

The Risk Manager will be responsible for helping to execute the globally mandated risk management process overseen by the Canadian Quality & Risk Management Technology Risk team. The Risk Manager will be responsible for supporting the identification, assessment, and mitigation of risks associated with the use of technology. This role interacts with members within Technology Risk Management, as well as Client Service business lines and other Risk Stakeholders responsible for areas such as Legal, Privacy, Independence, Information Security, Architecture, IT Support & Maintenance, Quality Assurance, and Strategic Risks.

What

You Will Do Facilitate Technology Risk Assessment Submissions and Respond to Consultations

• Gain a thorough understanding of risk assessment requirements and processes and advise business requesters to improve submission quality
• Stay updated on new technologies, e.g. artificial intelligence systems, and ensure risk processes are properly applied
• Gather information on technology tools to ensure the accuracy and completeness of technology risk assessment submissions
• Assist business and risk stakeholders with risk submissions, as required, by gathering necessary information, inputting details into the workflow platform and responding to needs to complete the assessment process
• Collaborate with business and risk stakeholders to provide required support during consultations
• Perform initial review of risk submissions, sign-offs, and supporting documentation to ensure relevant risks are assessed and addressed

Monitor and Facilitate the Timely Completion of Technology Risk Tasks and Approvals

• Collect and track status information from key contacts
• Monitor the completion of action items to ensure timely technology risk assessment approval
• Liaise with stakeholders to identify delays and escalates to Technology Risk management, if needed
• Use Service Now and other tools to track technology risk assessment submissions, and report status
• Project manage multiple assessments and keep Technology Risk management informed of progress on a regular basis
• Troubleshoot delays in the technology risk assessment process and develop solutions to resolve them

Conduct Technology Risk Assessments

• Draft risk assessment summaries for review and approval
• Present significant risks or complex findings regarding Legal, Privacy, Independence, Information Security, Architecture, IT Support & Maintenance, Quality Assurance, Strategic Risks, and Artificial Intelligence

Quality Assurance over Risk Assessments

• Assist in responding to internal Global Quality Management assessments related to Technology Risk Management

Support Technology Risk Initiatives

• Provide support on ad-hoc initiatives to enhance the efficiency and effectiveness of the Technology Risk Assessment process

What You Bring To

The Role

• Post secondary degree in a relevant field such as Business, Information Technology, Cybersecurity, Computer Engineering, Risk Management, Audit, or Compliance
• Certifications such as CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer/Lead Auditor are highly valued
• MBA or CPA designation is an asset
• A strong foundation in business processes, risk assessment, and IT systems. 5+ years of relevant experience in identifying and assessing information technology or business process risks and controls, preferably within a professional services firm or a large organization
• Demonstrated business acumen and comprehensive understanding of computing environments, enterprise architecture and IT risks and controls
• Familiarity with legal and privacy aspects of technology risk is an asset
• Possess a client-centric and service delivery approach, capable of establishing effective communication and building a strong rapport…