Technical Change Risk Manager

Job Description You will be working on a flexible hybrid schedule as part of Fidelity’s dynamic working arrangement. Current work authorization for Canada is required for all openings. The work location for this role is 483 Bay Street in Toronto until approximately late2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.

Who We Are

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services – and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future. Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best – both personally and professionally.

How You’ll Make an Impact

Reporting to the Director, Risk Management, the Technical Change Risk Manager provides independent risk oversight, technical review, and challenge of complex technology changes, projects, and application releases. The role supports the Change and Project Risk Management program by assessing whether critical technology changes are appropriately designed, coded, tested, documented, approved, and ready for implementation. The role reviews business requirements, technical designs, code changes, test evidence, release documentation, deployment plans, rollback strategies, and post-implementation results to identify control gaps, implementation risks, and release-readiness concerns. The position works with developers, QA teams, vendors, project teams, release managers, and risk owners to challenge risk decisions, elevate material issues, and strengthen technology change controls.

Responsibilities

• Change Risk Monitoring, Technical Review, and Release Readiness Review complex, critical, or high-risk technology changes to ensure risks are identified, assessed, documented, challenged, remediated, or formally accepted.
• Assess change risk and complexity to determine the appropriate level of technical review, challenge, and control activities required prior to release.
• Review business requirements, technical designs, test cases, QA and UAT results, release documentation, and implementation artifacts to confirm completeness, traceability, and alignment with intended business outcomes.
• Assess technical artifacts, data flows, dependencies, and application code where necessary to identify potential weaknesses, including logic errors, hardcoded values, inadequate validation, weak exception handling, data quality issues, and performance concerns.
• Evaluate identified risks with risk owners and assess whether response plans, remediation actions, compensating controls, or risk acceptances are appropriate, robust, and properly documented.
• Escalate material issues as required.
• Provide independent challenge to developers, QA teams, vendors, and project stakeholders where implementation, testing, or release readiness does not meet expectations.
• Assess test strategies, coverage, and evidence to ensure adequate validation of positive, negative, boundary, integration, regression, and operational scenarios.
• Identify gaps in documentation, design, implementation, testing, and release readiness, including unresolved defects, insufficient evidence, or incomplete risk mitigation.
• Review deployment plans, implementation sequencing, rollback strategies, and post-release validation to assess operational readiness.
• Participate in post-implementation reviews, lessons learned, incident reviews, and continuous improvement discussions to identify recurring root causes of change-related issues.
• Promote continuous improvement by identifying recurring issues and recommending enhancements to change risk practices and controls.
• Consistently advocate for strong risk management principles and build trusted relationships with stakeholders.

Program Monitoring, Oversight, and Reporting

Maintain Risk Management programs on a day-to-day basis to identify, monitor, assess, and report on risk. Programs include, but are not limited to, Change and Project Risk Management and ad hoc risk assessments. Ensure program policies, guidelines, standards, and internal procedures are kept current, relevant, and consistently applied. Escalate issues identified through real-time monitoring or formal reviews to the appropriate Risk Management leader. Maintain current program reporting and distribute it to key stakeholders. Identify areas for impr