Director Technology Risk

Overview

Job Posting:
Director Technology Risk

You will be working on a flexible hybrid schedule as part of Fidelity’s dynamic working arrangement.

The Director, Technology Risk will play a pivotal role in shaping and implementing the firm's technology risk management strategy. Leveraging advanced knowledge and expertise in technology-risk disciplines, you will identify, oversee, and mitigate compliance and operational risks in line with the firm's standards. The mandate extends to vendor risk management. You will collaborate with various stakeholders across Canada to develop and maintain a comprehensive view of the technology risk posture including but not limited to the Business continuity function and its impact on the business.

Your work will contribute to the long-term success and resilience of the organization in an ever-evolving technology landscape.

• Provides subject matter expertise and technical guidance to technology aligned process owners.
• Ensures that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.
• Consults with senior business management to ensure technology assessments are aligned and inform business operational risk assessments in a meaningful, actionable manner.
• Works within the Cyber Security Technology & Controls, Tech Risk & Controls Frameworks Team, in partnership with stakeholders from across Global Technology, to lead the global programs to accurately represent and maintain the firm’s complex technology operations.
• Innovates and provides analysis and thought leadership to drive improvement and enhancement to the Firm’s Operational Risk framework, platform and End-to-End Technology Risk Management lifecycle.
• Drives and leads change initiatives across the Firm’s Risk Organization (both Technology and Business) to improve the understanding of technology risk.
• Establishes a proactive and collaborative framework that ensures Personal Data of Fidelity Canada customers, employees and all other individuals’ data subjects is identified and adequately protected.
• Collaborates with functional owners to document existing data protection controls, identify potential gaps and enhancements and follow-through on the completion of agreed-upon changes.
• Focuses on identifying Personal Data book of records systems and assesses data protection controls in place, establishing action plans to address any potential gaps.
• Establishes formal DPO review and attestation processes on existing controls.
• Builds organization awareness on key data protection requirements.
• Promotes collaboration between all the groups that own data protection controls in their respective areas.
• Establishes and conducts Privacy Impact Assessments for Fidelity Canada projects, systems and business process enhancements.
• Contributes to the development and execution of BCP plan and strategies.
• Supports the business during actual BCP events, including logistical planning, event coordination, communication, and supporting business resumption.
• Partners with other IS teams to review and develop business recovery requirements and strategies.
• Ensures appropriate testing including test preparation, postmortem analysis and test issues are documented, investigated, resolved, or corrective actions applied when possible.
• Chairs change management meetings, maintaining logs of all changes, risk ratings, approvals, and closure activities.
• Represents FIC’s change management program including collaboration with FCC when possible.
• Maintains the Service Now Configuration database ensuring that all applications and processes are subject to change management and owners/approvers are up to date.
• Meets regularly with employees to provide timely feedback, support and coaching to foster individual and team growth and development.
• HR processes are managed effectively with activities such as bonus goal development and performance appraisals.

• A strong ability to communicate (written and verbal).
• A strong sense of accountability and taking initiative to drive projects to completion.
• Emphasis on risk and audit with an inquiring mind.
• Knowledge and understanding of clearing…