IT & Cyber Risk and Control Analyst

2 weeks ago


Toronto, Canada Questrade Financial Group Full time

Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure.

We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of.

This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits. If you share the same sense of infinite possibility, come shape your future at Questrade.

What’s in it for you as an employee of QFG?
- Health & wellbeing resources and programs
- Paid vacation, personal, and sick days for work-life balance
- Competitive compensation and benefits packages
- Hybrid and flexible work arrangements
- Career growth and development opportunities
- Opportunities to contribute to community causes
- Work with diverse team members in an inclusive and collaborative environment

What’s it like working as a IT & Cyber Risk and Control Analyst at Questrade?
The IT & Cyber Risk and Control Analyst is responsible for supporting the day-to-day monitoring and reporting of systems and processes for IT & Cyber Risk and Control across the Questrade Financial Group. This includes the monitoring and reporting mechanisms that highlight areas of risk exposure and opportunities for effective control of business risk arising from the use of technology. The IT & Cyber Risk and Control Analyst operates as part of a team of IT & Cyber Governance, Risk and Control professionals within the Office of the Chief Information Officer (OCIO) and interfaces with other technology, security, risk management and compliance areas at the enterprise and line of business levels.
Need more details? Keep reading

**In this role, responsibilities include but are not limited to**:

- Supports implementation and operation of the IT & Cyber Governance Framework, tools, processes, and methodologies.
- Supports collection of data on the status and performance of IT & Cyber services and initiatives to identify performance and/or control weaknesses that may lead to business risk.
- Performs analysis and aggregation of IT & Cyber performance, risk and control metrics for reporting, internal control effectiveness validation and attestation.
- Tracks remediation of identified IT & Cyber process and control gaps in the Enterprise Technology Risk Register working with stakeholders to maintain resolution traction and accurate reporting.
- Collects IT & Cyber Risk and Control metrics and indicators to produce dashboards and reports for management.
- Assists with or executes Risk and Control Self-Assessments and the review of evidence and artifacts to support self-assessment rationales.
- Works with Technology and Security Operations teams and SMEs to implement and operationalize IT process, risk and control templates, reports and metrics.
- Coordinates reporting of Operational and Cyber Resilience testing and scenario simulation exercises.
- Assists with the review or revision of policies, standards, and procedures for IT Governance, IT Operations, and IT Security.
- Coordinates and supports Regulatory, Internal and/or External Audit requests for information and vetting of material provided by respective operational teams.
- Validates completeness of technology project artifacts for risk management of material projects.
- Reviews and confirms completeness of incident reports and that all relevant details are captured for regulatory reporting.

So are YOU our next IT & Cyber Risk and Control Analyst ? You are if you
- 1 to 3 years of experience in information technology Internal Audit and/or Risk Management in a regulated financial institution.
- 1 to 3 years of hands-on information technology or security operations experience.
- Holds one or combination of CISA, CRISC, CGEIT or working towards them.
- Experience writing or updating Technology and Security procedures.
- Experience building key performance and risk indicator dashboards and reports.
- Understanding of a broad set of industry best practices (COBIT, ITIL, NIST CSF, Cloud CSC, Agile SAFe, PCI-DSS, etc.)
- Exposure to financial industry business processes.
- Exposure to enterprise and operational risk principles and practices.
- Exposure to risk scenario analysis, risk quantification and loss event data reporting.

Characteristics
- Takes ownership of tasks and drives them to completion.
- Strong written, oral communication, and interpersonal skills.
- Ability to communicate with individuals at all levels of an organization.
- Highly motivated with a mature and positive attitude towards learning new skills.
- Familiarity working with Google Workplace tools



  • Toronto, Canada LeverageTek IT Solutions Full time

    Opportunity DetailsLeverageTek is actively seeking a Senior Business Analyst – Cyber for a 4-month contract with its Ottawa/Montreal-based customer.Work LocationRemoteKey TasksCollaborate with stakeholders to elicit, document, and validate the business and system requirements Contribute to the development of cyber security strategies aligned with...


  • Toronto, Canada LeverageTek IT Solutions Full time

    Opportunity Details LeverageTek is actively seeking a Senior Business Analyst – Cyber for a 4-month contract with its Ottawa/Montreal-based customer.Work LocationRemoteKey TasksCollaborate with stakeholders to elicit, document, and validate the business and system requirements Contribute to the development of cyber security strategies aligned with...


  • Toronto, Canada LeverageTek IT Solutions Full time

    Opportunity Details LeverageTek is actively seeking a Senior Business Analyst – Cyber for a 4-month contract with its Ottawa/Montreal-based customer. Work Location Remote Key Tasks Collaborate with stakeholders to elicit, document, and validate the business and system requirements Contribute to the development of cyber security strategies aligned with...


  • Toronto, Canada LeverageTek IT Solutions Full time

    Opportunity Details LeverageTek is actively seeking a Senior Business Analyst – Cyber for a 4-month contract with its Ottawa/Montreal-based customer. Work Location Remote Key Tasks Collaborate with stakeholders to elicit, document, and validate the business and system requirements Contribute to the development of cyber security strategies aligned with...


  • Toronto, Canada LeverageTek IT Solutions Full time

    Opportunity Details LeverageTek is actively seeking a Senior Business Analyst – Cyber for a 4-month contract with its Ottawa/Montreal-based customer. Work Location Remote Key Tasks Collaborate with stakeholders to elicit, document, and validate the business and system requirements Contribute to the development of cyber security strategies aligned with...


  • Toronto, Canada Royal Bank of Canada Full time

    **Come Work with Us!** At RBC, our culture is deeply supportive and rich in opportunity and reward. You will help our clients thrive and our communities prosper, empowered by a spirit of shared purpose. Whether you’re helping clients find new opportunities, developing new technology, or providing expert advice to internal partners, you will be doing work...


  • Toronto, Canada Toronto District School Board Full time

    No. CUPE C-23-0157UE POSTED: June 6, 2023 DEADLINE: 4:30 p.m: June 14, 2023 **Analyst l, Cyber Threat and Vulnerability Management** 1 - Permanent Position **Information Technology Services** **CUPE Local 4400, Unit C - Grade O (12 Month)** **$42.90 per hour** **The Toronto District School Board adheres to equitable hiring, employment and promotion...


  • Toronto, Canada Roots Full time

    Roots is more than just an/the iconic Canadian retailer, we are a group of passionate employees who act with integrity, trust each other, and do what is right. We work in a space where people can grow and develop, with a team of people who own results and are dedicated to seeing Roots win. We seek to build longstanding relationships with partners who share...


  • Toronto, Canada Tata Consultancy Services Full time

    **About TCS** TCS operates on a global scale, with a diverse talent base of more than 600,000 associates representing 153 nationalities across 55 countries. TCS has been recognized as a Global Top Employer by the Top Employers Institute - one of only eight companies worldwide to have achieved this status. Our organizational structure is domain-led and...

  • Analyst, Risk

    1 week ago


    Toronto, ON, Canada nugget.ai Full time

    Location: Toronto (hybrid-3 times per week) Employment Type: Contract About the Role : The Threat Modeling Analyst is responsible for identifying threats and vulnerabilities across company systems and communicating the issues with the appropriate team – infrastructure, IT, risk, DLP, or any affected members. Responsibilities : Work...


  • Toronto, ON, Canada Cyber Crime Full time

    CyberSecurity Applications Developer/Analyst Bank on your terms with CIBC – whether it’s in person, over the phone or online, CIBC has you covered. We’re building a relationship-oriented bank for the modern world. Design & Develop: Act as a technical lead and SME (subject matter expert) on the analysis and documentation of business requirements,...


  • Toronto, Canada Atlantis IT Group Full time

    Cyber Security and Network Security: 5+ years’ experience in network security on advanced SD networks – preferably for Ontario K-12 school boards 4+ years hands-on experience with cyber security, network security and network protection solutions and technologies – preferably for Ontario K-12 school boards, including: Next-generation cyber security...


  • Toronto, Canada Atlantis IT Group Full time

    Cyber Security and Network Security: 5+ years’ experience in network security on advanced SD networks – preferably for Ontario K-12 school boards 4+ years hands-on experience with cyber security, network security and network protection solutions and technologies – preferably for Ontario K-12 school boards, including: Next-generation cyber security...


  • Toronto, Canada Atlantis IT Group Full time

    Cyber Security and Network Security: 5+ years’ experience in network security on advanced SD networks – preferably for Ontario K-12 school boards 4+ years hands-on experience with cyber security, network security and network protection solutions and technologies – preferably for Ontario K-12 school boards, including: Next-generation cyber...


  • Toronto, ON, Canada Quantum Technology Recruiting Inc. Full time

    Position : Senior Cyber Security Specialist (Risk) Location : Toronto – Downtown (Hybrid, 3 days/week on site) Our client, a leading retailer and wholesaler, is currently seeking a Senior Cyber Security Specialist (Risk) to join their dynamic team in Toronto. This role offers the opportunity to make a significant impact by providing guidance on...


  • Old Toronto, Canada Quantum Technology Recruiting Inc. Full time

    Position: Senior Cyber Security Specialist (Risk)Location: Toronto – Downtown (Hybrid, 3 days/week on site)Our client, a leading retailer and wholesaler, is currently seeking a Senior Cyber Security Specialist (Risk) to join their dynamic team in Toronto. This role offers the opportunity to make a significant impact by providing guidance on security risk...


  • Old Toronto, Canada Quantum Technology Recruiting Inc. Full time

    Position: Senior Cyber Security Specialist (Risk)Location: Toronto – Downtown (Hybrid, 3 days/week on site)Our client, a leading retailer and wholesaler, is currently seeking a Senior Cyber Security Specialist (Risk) to join their dynamic team in Toronto. This role offers the opportunity to make a significant impact by providing guidance on security risk...


  • Old Toronto, Canada Quantum Technology Recruiting Inc. Full time

    Position: Senior Cyber Security Specialist (Risk)Location: Toronto – Downtown (Hybrid, 3 days/week on site)Our client, a leading retailer and wholesaler, is currently seeking a Senior Cyber Security Specialist (Risk) to join their dynamic team in Toronto. This role offers the opportunity to make a significant impact by providing guidance on security risk...

  • Business Analyst

    6 days ago


    Toronto, Canada Atlantis IT group Full time

    **Role: Business Analyst Credit Risk** **Location: TORONTO, ON** **Duration - Long Term** Business Analysis, Credit Risk - Information Services, TLM Configuration - Credit Risk Experience and FRTB experience - Market Risk Experience - End to End requirements gathering and creation of documentation - Strong SQL skills Credit Risk and FRTB Analyst 5 +...

  • Quality Control

    2 weeks ago


    Toronto, Canada Atlantis IT group Full time

    **Role**: Quality control - Risk Management **Location**: Toronto Fulltime Onsite **Skills and Responsibilities**: Internal Audit experience Vendor Management / Relationship Management experience Understanding of the Third-Party Risk Assessment process and all associated activities Understanding of Quality Control Testing Processes Knowledge/Understanding...