Technology Risk & Security - Functional Consultant

In Canada - Toronto

This role serves as the bridge between business demand, IT architecture, cybersecurity, SOC, audit, compliance, procurement, privacy, and implementation teams - operating within the company’s Technology Demand Intake Process, which is closely connected to implementation and lifecycle governance.

This individual will focus on reviewing technical concepts, stand-alone products, services, and AI-enabled solutions that the company plans to implement or integrate into its complex global enterprise technology landscape, including SaaS, PaaS, SAP, and AI-enabled platforms.

You will be responsible for assessing and governing new technology demands, services, platforms, and AI-enabled solutions through the organization’s technology intake process.
The role ensures that security, compliance, architecture, operational, and business risks are identified, clearly documented, and addressed through effective and practical mitigation measures before implementation.

What makes us special:

• Become part of a unique entrepreneurial team. Think independently, use your initiative, and take some risks. Entrepreneurship is a powerful force that drives the growth not only of our firm but our clients and people.
• Unlock the power of opportunity. Advance your career in a thriving company with a startup feel. We invest in your professional development every step of the way.
• Work in a values-driven culture. At Simon-Kucher, our vision is to become the world's leading growth specialist. Our values guide the way we do business and communicate our distinctiveness. They sum up what we stand for, influence our culture, and drive how and why we do things.
• Invest in your future. All US and Canadian employees enjoy 401(k) & RRSP benefits with company matching.
• Prioritize your health and well-being. No matter where you live, we offer a competitive suite of health benefits to help keep you and your loved ones safe.
• Enjoy balance and flexible working. Be empowered to do your best work – whether it’s from home or in the office.

How you will create an impact:

• Core Responsibilities
  • Manage the end-to-end Technology Demand Intake and Risk Assessment process for new technologies, platforms, tools, and AI-enabled solutions.
  • Assess security, compliance, operational, vendor, and architecture risks; identify mitigation strategies and recommend risk treatment decisions.
  • Prepare executive-ready reports and present findings to IT leadership, governance boards, and risk committees.
  • Partner with Security, IT, Architecture, Procurement, Legal, Privacy, Audit, and business stakeholders to evaluate and approve technology solutions.
  • Ensure new technologies comply with security policies, controls, and integration requirements.
  • Maintain risk documentation, exception records, control evidence, and governance reporting while continuously improving intake processes.
  • Stay current onemerging technologies, AI, cybersecurity trends, regulatory requirements, andindustry control frameworks
• Business & Stakeholder Engagement
  • Translate business requirements into security and compliance recommendations that enable timely technology decisions.
  • Communicate complex technical concepts through presentations, decision papers, and executive-facing materials.
  • Facilitate collaboration across IT architecture, infrastructure, business teams, vendors, and other stakeholders.
• Vendor & Project Support
  • Support vendor assessments, RFPs, technical evaluations, and solution reviews.
  • Contribute to cross-functional IT projects by identifying dependencies, risks, and process improvements.
  • Work effectively in agile, global projectenvironments with multiple priorities and tight timelines.

About You:

• Organizational Background
  • Exper…