Tech Lead - Grc Engineering

Position: TECH LEAD - GRC ENGINEERING
Location: Montreal

We Are Banking At Another Level.

We Are Banking At Another Level.
Choosing BDC as your employer  means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs.

Choosing BDC As Your Employer Also Means

Flexible and competitive benefits, including an Employee Savings and Investment Plan where BDC matches part of your voluntary contributions, a Defined Benefit Pension Plan, a $750 wellness and health care spending account, to name a few

In addition to paid vacation each year, five personal days, sick days as necessary, and our offices are closed from December 25 to January 1

A hybrid work model that truly balances work and personal life

Opportunities for learning, training and development, and much more...

Explore the BDC Way in our Culture Book

Position Overview
BDC is seeking a Tech Lead to join the Risk & Value Office squad in Montréal. This role combines technical leadership, risk expertise, and data-driven delivery to advance Info Sec’s ability to monitor and manage its risk landscape. The Tech Lead will guide the design and implementation of GRC engineering capabilities, ensure the quality and consistency of squad deliverables, and drive the adoption of scalable analytics, automation, and reporting solutions.

Acting as a key advisor, the role also strengthens technology risk management practices and enables actionable, executive-level insights.

CHALLENGES TO BE MET
Technical Leadership & Squad Enablement

Act as the tech lead for the Risk & Value Office squad, providing guidance on GRC engineering and risk management.

Review and challenge the quality of the squad deliverables to ensure alignment with Info Sec standards and executive expectations.

Coach and mentor squad members on GRC engineering practices and risk management concepts, fostering capability uplift and autonomy.

Drive adoption of best practices in data, automation, and secure development, ensuring consistency across initiatives.

Provide technical guidance in prioritization and backlog refinement, ensuring work is aligned with value, risk reduction, and strategic objectives.

Risk Management & Governance

Lead and contribute to the continuous improvement of the Info Sec technical risk management framework, ensuring strong integration with data-driven insights.

Oversee the identification, assessment, and monitoring of technology and cyber risks, leveraging metrics, analytics, and automation.

Ensure risk outputs, such as KRIs, control effectiveness and audit findings, are consistent, traceable, and defensible.

Provide expert guidance on risk posture, remediation strategies, and prioritization, to support management decision-making.

Lead or support key risk management initiatives, such as the Digital Crown Jewels framework and Cyber Operational Risk Events Management.

Support internal and external audits, ensuring timely completion of remediation actions.

Prepare documentation related to policy, standards, and procedures.

Data-Driven GRC & Engineering

Participate to the design and implementation of data-driven GRC capabilities, including automated data ingestion, transformation, and insight generation.

Define and enforce data architecture and governance practices for security metrics and reporting.

Support the squad in maintaining and developing key security metrics, including risk and control indicators.

Contribute to the development of scalable solutions leveraging tools such as Power BI, Power Platform, SQL, and APIs.

Identify and implement opportunities to automate workflows,…