AVP Technology Risk Management

The Canada Life Assurance Company•Toronto, ON

4d•CA$175,000 - CA$225,000•Hybrid

About The Position

Technology redefines the way we work and deliver to meet business needs and elevates the customer experience. You’ll be part of an organization that is embracing modern technology, innovation and agile ways of working. Our Technology team is a strategic partner in our business – with an ambition to be a forward-thinking, agile technology organization delivering secure, resilient and leading solutions that support Canada Life and the well-being of millions of Canadians. We are looking for an AVP, Technology Risk. We are hiring for two roles, one supporting our Lifeco division and one supporting our Canadian division. The AVP, Technology Risk is a Second Line of Defense role and reports to the VP, Technology Risk. This role will work with senior leadership in executing proactive and effective Technology risk management practices across the Technology organization, helping technology teams embed a risk management culture into delivery and support as technology drives toward meeting business objectives. This includes providing a holistic view of the organization’s overall technology risk posture and helping us operate within the risk appetite established for Technology Risk. Further, this role will be responsible for oversight of the continued development, adoption and operationalization of technology risk practices, controls and operating standards working closely with enterprise risk partners; ensuring that technology risks are clearly understood, controls are implemented to mitigate those risks, and continuous monitoring is established to measure control effectiveness.

Requirements

10+ years’ experience in a similar technology risk leadership position
5-10 years of experience of in the financial services industry or in a large organization
5-10 years of experience within the area of risk, compliance or governance specific to Information Services.
Understanding of technology risk regulatory, best practices and industry best practices
Experience building and working in matrix and complex organizations with demonstrated ability to influence teams where resources do not all report directly into the function.
Skilled leader with exceptional communication abilities, collaboration and relationship building skills establishing credibility and fostering cross-functional relationships.
Strong verbal and written communication skills and interpersonal skills needed to effectively build relationships and communicate with Executives, internals stakeholders, and customers.
Constant learner and passion for technology and risk governance
Deep understanding of how large enterprise organizations work, within in a regulated environment
Proven ability to identify, analyze and translate risk in the context of what it means to achieving business objectives
Familiarity working with a Business Information Security Office (BISO) model
Ability to attract, motivate and develop talent to build the right team to meet strategic direction and tomorrow’s needs
Extensive knowledge of Cyber and Technology Risk Governance and Control frameworks/standards (i.e., COBIT 2019, ISO 27001, NIST CSF, ITL, etc.)

Nice To Haves

5-10 years of experience in varied senior security related leadership positions would be an asset.
Certifications in CISSP, CISA, CISM, CRISC would be an asset

Responsibilities

Provide oversight and challenge for the company to advance Technology Risk Governance policies, practices and operating model
Provide oversight for the design, implementation, maturity, and continuous monitoring of technology risk controls that reduce a broad spectrum of technology operational risks
Participate in governance structure with appropriate committees and stakeholder groups
Ensure the development and adoption of policies and operating standards; enforce compliance and run ongoing monitoring of compliance with policies and standards across all levels of the organization
Review the development and evolution of Canada Life’s technology issues and audit management processes for identification, tracking, and timely remediation of technology risk issues.
Partner with Technology to maintain or expand risk capabilities and services governance
Assess the Technology Risk & Control identification process across Canada, supporting the 1 LOD in implementation of controls and conducting Risk and Control Assessment across Canada
Advance innovation strategy including automated control testing and the use of AI
Contribute to the development and implementation of key risk indicators (KRIs), control indicators, and reporting to measure risk posture and highlight areas of concern
Foster, advocate for, and strengthen the organization’s overall technology risk posture
Coordinate technology risk activities including supporting audit activities such as Risk reporting and regulatory and related compliance reporting