Specialist,IT RISK Management - Montreal Job Toronto area,Ontario Canada,IT/Tech

Position: SPECIALIST, IT RISK MANAGEMENT - Montreal and

We are banking at another level.

Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs.

Choosing BDC as your employer also means:

Flexible and competitive benefits
, including an Employee Savings and Investment Plan where BDC matches part of your voluntary contributions, a Defined Benefit Pension Plan, a $750 wellness and health care spending account, to name a few

In addition to paid vacation each year, five personal
days
, sick days as necessary
, and our offices are closed
from December 25 to January 1

A hybrid
work model that truly balances work and personal life

Opportunities for learning
, training and development
, and much more...

Explore the BDC Way in our Culture Book

POSITION OVERVIEW

As part of the Operational Risk Management (ORM) team, you will help strengthen the organization's ability to identify, assess, monitor, and manage Information Security (Info Sec) and Information Technology (IT) risks. You will act as a subject matter expert in operational risk and technology risk management, providing oversight, challenge, and guidance to stakeholders across the organization. Your work will contribute directly to the effectiveness and evolution of BDC’s operational risk framework while supporting strategic and digital transformation initiatives.

CHALLENGES TO BE MET

Support first- and second-line stakeholders in the execution of Operational Risk Management programs, including:
Risk and Control Self-Assessments (RCSA);
Key Risk Indicators (KRI);
Operational Risk Events;
Business Continuity Management (BCM);
Risk Appetite activities;
New product, project, and business initiative risk assessments.

Review and challenge Information Security and Technology risk assessments completed by the first line of defence.

Review and challenge operational risk events related to Information Security and Technology.

Monitor remediation activities and action plans to ensure risks are addressed effectively.

Recommend enhancements to technology risk assessment methodologies, processes, and tools.

Support the continuous improvement of ORM practices to align with operational realities and industry best practices.

Manage ORM reporting activities, including:
Data collection and analysis;
Risk reporting;
Action plan tracking;
Committee and governance presentations.

Develop and maintain relationships with key stakeholders, including first-line leadership, second-line risk functions, and senior management.

Develop, maintain, and enhance ORM governance documents, procedures, and methodologies.

Coach and mentor junior team members to strengthen overall ORM capabilities.

Contribute to initiatives that support BDC’s mission of helping Canadian entrepreneurs succeed while maintaining sound risk management practices.

WHAT WE ARE LOOKING FOR

Required Qualifications

Bachelor’s degree in Information Technology, Communications, Business Administration, Social Sciences, or a related discipline.

Minimum five (5) years of experience in one or more of the following areas:
Technology Risk Management;
Technology Resilience;
Technology Audit;
Information Security Risk Management;
Related risk management disciplines.

Demonstrated expertise in at least one of the following domains: IT Operations;
Information Security (Info Sec);
Data Risk Management;
Digital Technology Risk;
Emerging Technology Risk.

Knowledge of governance, risk, and control frameworks, including the Three Lines of Defence model.

Experience reviewing, assessing, and…

Specialist, IT RISK Management - Montreal