Team Lead, Technology Risk and Control

** Team Lead, Technology Risk and Control
**** Department:
** IT Security and Governance, Information Technology Operations and Security Division
** Type:
** 12 Month-Contract
*
* Location:

** Toronto (Hybrid)
** Posting Date:
** February 9, 2026

At OPTrust,
*** paying pensions today, preserving pensions for tomorrow
*** is our mission and business.

When you choose OPTrust, you join a team of smart, talented people who fuel our success and have a passion for pensions. Everyone at OPTrust – in Toronto, London and Sydney – makes a meaningful impact. Our culture is driven by team members with different backgrounds and perspectives creating an inclusive and fulfilling place to work for everyone. We work in a fast-paced environment, but we find time to have fun and give back to the community.
** What OPTrust Offers You
*** Unique culture rooted in our core values – collaboration and teamwork, integrity, respect, flexibility, excellence and continuous improvement.
* A purpose-driven environment where we all work towards the common goal of paying pensions today and preserving pensions for tomorrow.
* A flexible, hybrid work model.
* Benefits package after six months of consecutive employment.
* Optional membership in our world-class defined benefit pension plan.
* A dedicated inclusion, diversity and equity strategy with meaningful opportunities to participate, including our employee-led resource groups.
** About the role
** This role is responsible for Governance, Risk and Compliance (GRC) initiatives in ITOS division, including, developing and maintaining ITOS risk management processes, leading audit and compliance activities related to IT and security operations, and leading the ITOS Change Management process. The incumbent will develop and enhance IT General Control (ITGC) review programs, maintain and regularly review policies, procedures, process flows and documentation, identify internal control gaps that should be remediated, and monitor the remediation of control deficiencies.
** What you’ll do
** Leadership and Governance
* Lead and mentor a small team, provide guidance and support, delegate tasks effectively, and conduct regular team meetings to discuss ongoing projects, share insights, and address any challenges or concerns.
* Propose and implement improvements to internal controls, collaborating with teams to align with IT and security processes, and contribute to the documentation of related processes and baseline standards.
* Leads the implementation, maintenance, and communication of the ITGC related policies, procedures, and programs, and performing ongoing reviews to be consistent with actual practices.
* Responsible for tracking all vendor agreements and documentation and the measurement of vendor performance against SLAs to ensure contractual terms are met and continuous improvement.
* Advises and educates others on internal controls and security procedures.
* Leads operational activities, communicates procedures and engages vendors where applicable.
* Prepares and delivers ITOS divisional performance reporting.
* Responsible for researching leading-edge technologies, technology standards and best practices to identify process improvement opportunities for the IT teams.

Audit and Compliance
* The point of contact between the external auditor and ITOS team, lead, plan, execute, and manage IT and security-related audit activities, collaborate with internal and external stakeholders including but not limited to collecting evidence, explaining business processes, performing audit test and proposing remediation action plans.
* Leads, and conducts regular internal audits of information systems, applications, and IT processes, prepares working papers to document the work performed to ensure that appropriate controls exist, and that information produced by the system is accurate.
* Prepares reports and recommendations for management on the results of information systems audits.

IT and Security Risk Management
* Develop, implement, and maintain a comprehensive ITOS risk management process to identify, assess, and prioritize ITOS risks.  Collaborate with cross-functional teams to ensure that IT risk assessments and…