Director, IT & Operational Resiliency

Job Summary

Reporting to the SVP & Chief Risk Officer, the Director, Technology & Operational Resiliency is responsible for the oversight, development and continuous enhancement of the organization's technology risk, cybersecurity risk, operational resilience and third-party risk management programs. The role provides independent challenge and oversight of technology, cybersecurity, business continuity, disaster recovery and critical third-party risks, ensuring alignment with regulatory expectations, risk appetite and strategic objectives.

• Provide independent oversight and challenge of technology and cybersecurity risks, including material systems, infrastructure, cloud services, data, architecture and critical technology dependencies.
• Monitor technology resilience and recovery capabilities, including disaster recovery testing, RTO/RPO performance, backup and restoration, and recoverability of critical systems.
• Challenge the adequacy of cyber resilience, incident response, recovery planning and remediation for material services and critical operations.
• Oversee implementation and ongoing compliance with OSFI expectations related to technology risk, cybersecurity risk, operational resilience and third-party risk management.
• Lead the continued development and enhancement of the Operational Risk Management & Resiliency Framework and related oversight practices.
• Coordinate the identification, mapping and maintenance of critical operations and their supporting people, processes, technology, data and third-party dependencies.
• Lead operational resilience scenario testing and assess the organization's ability to remain within approved disruption tolerances.
• Oversee business continuity, disaster recovery and crisis management programs, including testing, lessons learned and remediation activities.
• Maintain and enhance operational risk and third-party risk programs, including RCSAs, process inventories, operational risk events, KRIs, due diligence, ongoing monitoring and contingency planning.
• Report to Senior Management, and Board and Board Committees (ad-hoc basis) on operational, technology, cyber and third-party risks, and translate complex issues into clear, actionable business insights.

• 7+ years of experience in technology risk, cybersecurity risk, operational risk, operational resilience, business continuity, third-party risk management or a related discipline.
• Big 4 consulting Experience is preferred.
• Experience with in a federally regulated financial institution or other regulated industry.
• Strong knowledge of OSFI Guidelines E-21, B-13 and B-10.
• Demonstrated leadership and people management experience.

• Technology Risk
• Cyber Risk
• IT Audit
• Operational Risk
• Business Continuity / Operational Resilience
• Third-Party Risk Management

This posting is intended to attract candidates with strong technology and cybersecurity risk fluency, combined with operational resilience and governance experience.