IT Risk and Governance Specialist

**Who is Allstate**: Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. The company is proud to have been named a Best Employer in Canada for nine consecutive years and prioritizes supporting employees and fostering an inclusive, welcoming corporate culture. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. Serving Canadians since 1953, Allstate strives to provide reassurance with its "You’re in Good Hands®" promise. - Through our Employee Value Proposition, Opportunity, Flexibility, Community, Diversity and Family, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do._ **Role Designation**: Hybrid **Benefits to joining Allstate** - Flexible Work Arrangements - Employee discounts (15% on auto and property insurance, plus many other products and services) - Good Office program (receive up to 400$ back after purchasing office equipment) - Student Loan Payment Matching Program for Government Student loans - Comprehensive Retirement Savings Program with employer matched contributions - Annual Wellness allowance to support employees with improving health and wellbeing - Personal reflection day - Tuition Reimbursement - Working within the community and giving back **Job description**: Our team is growing, and we are actively looking to hire an IT Risk and Governance Specialist to join our team **Accountabilities**: - Perform various Risk Assessments and ensuring that risks identified are assigned owners with appropriate risk treatment plans. - Produce quarterly and monthly risk reports and dashboards for senior leadership - Collaborate with IT teams to complete annual certifications for PCI compliance by assisting the Qualified Security Assessor (QSA) and leading in evidence collections, reviews and quality control to obtain Report on Compliance (RoC) and Attestation of Compliance (AoC). - Collaborate with cross-functional development teams to analyze and coordinate efforts for security solutions and conduct post-implementation performance audits. - Reviews and analyzes product changes for impacts to security, and architecture documentation to remediate design decisions, operating procedures, or processes that impact adherence to security commitments. **Qualifications**: - Diploma or Bachelor’s degree in Computer Science. - Requires 2-5 years of relevant experience working in information security, process auditing, or other compliance related area. - IT governance, risk, and compliance (GRC) principles, standards, and best practices (e.g. risk management, governance, information security controls, etc.). - IT security and governance frameworks (e.g. ISO 27001/2, NIST, COBIT, etc.). - Data security risk management and mitigation processes. - Ability to interact with a wide range of management levels throughout the organization coupled with a strong ability to influence others. - Strong systems acumen to quickly learn and adapt to a variety of systems. - Interpersonal, oral, and written communication skills. - Analytical, critical thinking, and problem-solving skills. **Bonus qualification**: - Security certification (e.g. CISSP, CISA, CRISC, CISM etc.) would be an asset. - Experience with a variance / exception management platform (e.g. RSArcher, ServiceNow, etc.) is preferred. Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs. **Job Types**: Full-time, Permanent **Benefits**: - Dental care - Life insurance - Paid time off - Vision care Schedule: - Monday to Friday Ability to commute/relocate: - Markham, ON: reliably commute or plan to relocate before starting work (required) Application question(s): - Are you comfortable working in a hybrid setting? - How many years of experience do you currently have in information security, process auditing or other compliance related area? - What are your salary expectations? Work Location: Hybrid remote in Markham, ON