Senior Manager, Technology Risk Management - Questbank

Senior Manager, Technology Risk Management
- Questbank

North American Centre, 5700 Yonge St #210B, North York, ON M2M 4G3, Canada

Posted Wednesday, June 24, 2026 at 4:00 AM

Questrade Financial Group (QFG), through its companies
- Questrade, Questbank, Questrade Wealth Management, Community Trust Company, Zolo, and Flexiti, provides securities and foreign currency investment, professionally managed investment portfolios, mortgages, real estate services, financial services and more. We use cutting‑edge technology to help Canadians become much more financially successful and secure.

At QFG, we combine human‑centric collaboration with AI‑driven innovation to redefine financial services. The ideal candidate will be a catalyst for change, using AI to transform and deliver unparalleled customer experiences and shaping a future where AI empowers our teams to do their best work.

Join our diverse, inclusive, and hybrid workplace to unleash your creativity and nurture your curiosity without limits. If you share this sense of infinite possibility, come shape your future at QFG.

What’s in it for you as an employee of QFG?

Health & wellbeing resources and programs

Paid vacation, personal, and sick days for work‑life balance

Competitive compensation and benefits packages

Work‑life balance in a hybrid environment with at least 3 days in office

Career growth and development opportunities

Opportunities to contribute to community causes

Work with diverse team members in an inclusive and collaborative environment

This job posting is for an existing vacancy

Reporting to the Director, Operational Risk Management, the Senior Manager, Technology Risk leads the second line of defence (2

LOD) oversight of technology, cyber, and data risk across Questbank. The role is responsible for leading the design, implementation, operationalization, and ongoing sustainment of Questbank’s Technology and Cyber Risk Management framework, supporting compliance with applicable regulatory requirements (including but not limited to OSFI Guideline B‑13 – Technology and Cyber Risk Management and Guideline E‑21 – Operational Risk and Resilience) and the Company’s approved risk appetite.

The incumbent positions the 2

LOD to provide effective, independent review and challenge of the first line’s management of technology and cyber risk in Questbank’s predominantly outsourced operating model, including emerging domains such as data integrity and the responsible use of artificial intelligence, and acts as the independent risk gatekeeper for new products and material technology change, embedded directly within Questbank’s product and platform streams. Combining enterprise‑grade framework build with deep technical subject‑matter expertise, the role is a critical enabler of Questbank’s growth across its product portfolio.

We’re looking for our next Senior Manager, Technology Risk. Could It Be You?

This role is responsible for the independent design, execution, and oversight of 2

LOD technology and cyber risk assessments, risk‑based control testing, and the validation of IT and cybersecurity controls. The incumbent applies a strong technical background to critically evaluate and challenge the first line’s management of technology and cyber risk, including emerging domains such as data integrity and the responsible use of artificial intelligence, and to analyze technology performance, risk metrics, and control effectiveness against established standards, policies, and regulatory requirements (e.g., ISO 27001, NIST CSF, COBIT, and OSFI Guidelines B‑13 and E‑21).

The incumbent produces technology and cyber risk reporting for the Operational Risk Management Committee (ORMC) and supports the Director, Operational Risk in onward reporting to Executive Management, the CRO, and the Board, articulating control deficiencies, residual risk exposures, and recommendations to the first line and to outsourced technology service providers.

Framework and governance:
Operate within and contribute to the continuous improvement of the 2

LOD Technology and Cyber Risk Management framework, policy, and standards governing technology, cyber, and data risk.

Outsourced technology…