Manager, Risk - Technology Services Group

Optimus SBR•Toronto, ON

2d•CA$110,000 - CA$135,000•Hybrid

About The Position

Join a dynamic and engaging Technology Services Group that thrives on collaboration, innovation, and growth. The Manager, Risk role is an exciting opportunity to lead meaningful technology advisory, delivery, risk, cybersecurity, and controls engagements across diverse industries. If youâ€™re passionate about solving complex problems, building trusted client relationships, developing high-performing teams, and delivering impactful technology solutions, this role is for you.

Requirements

7+ years of relevant experience in technology risk, IT audit, cybersecurity, control testing, regulatory compliance, technology delivery, or advisory consulting.
Demonstrated experience leading technology risk, controls, cybersecurity, or technology advisory engagements and managing project teams.
Strong understanding of IT and business controls, including experience assessing control design and operating effectiveness.
Experience reviewing policies, procedures, risks, and controls and identifying gaps, remediation opportunities, and opportunities for standardization or automation.
Experience leading or supporting cybersecurity/technology governance, maturity, regulatory readiness, or operating-model assessments.
Knowledge of recognized frameworks such as COSO, COBIT, NIST CSF, or ISO 27001.
Strong project-management capabilities, including experience managing scope, timelines, budgets, risks, resources, and deliverable quality.
Strong analytical, problem-solving, written communication, presentation, and client-engagement skills.
Demonstrated ability to communicate effectively with senior stakeholders and translate complex technology or risk topics into clear business implications and recommendations.
Experience directing workstreams, coaching team members, reviewing work products, and providing constructive feedback.
Ability to balance multiple client and internal priorities in a fast-paced consulting environment.
University degree in business, accounting, technology, cybersecurity, or a related discipline.

Nice To Haves

Certifications such as CPA, CRISC, CISSP, CISA, or CISM.
Understanding of Canadian and US regulators, including OSFI, OCC, FFIEC, and FRB.
Experience with SOX/ICFR, SOC reporting, or IT audit/control assurance activities.
Previous experience in a 1LoD or 2LoD role.
Experience with control rationalization, regulatory mapping, procedure development, or identifying automation opportunities.
Familiarity with GRC, analytics, and automation tools.
Big 4 or management consulting firm experience.
Experience supporting business development, proposals, or account growth.

Responsibilities

Lead project scoping, approach design, work planning, team structure, resource requirements, and effort and timeline estimation.
Lead technology risk and advisory engagements, taking accountability for delivery within agreed scope, timelines, budgets, and quality expectations.
Serve as a key day-to-day client contact, building trusted relationships with senior stakeholders and providing clear, practical advice.
Lead client meetings, workshops, and working sessions, and oversee the development of reports, presentations, recommendations, and executive-level deliverables.
Manage multiple workstreams and project teams, ensuring effective coordination across client and Optimus SBR resources.
Proactively identify, manage, and escalate project risks, issues, dependencies, resource constraints, and changes in scope.
Provide quality oversight and review of project deliverables to ensure recommendations are well supported, practical, and aligned with client objectives.
Identify opportunities to expand client relationships and support the development of follow-on engagements.
Lead technology risk, cybersecurity, regulatory, governance, and controls advisory engagements.
Assess technology risks and evaluate the effectiveness of associated governance, processes, and controls.
Apply recognized risk and control frameworks to assess complex client environments and develop practical, risk-based recommendations.
Lead reviews of policies, standards, procedures, risk assessments, and control documentation for completeness, consistency, and alignment with regulatory and industry expectations.
Lead and support regulatory and industry-standard assessments, including evaluating whether relevant risks, requirements, and obligations are appropriately addressed.
Identify opportunities to strengthen, standardize, rationalize, or automate risk and control activities.
Demonstrate strong knowledge of control design and operating effectiveness, including control objectives, testing approaches, evidence requirements, deficiency assessment, and documentation of conclusions.
Oversee control assessment and testing activities across IT general controls, application controls, business controls, and technology-dependent controls.
Review team analysis and testing to ensure findings are appropriately supported, risk-rated, and clearly communicated.
Translate complex technology and risk matters into clear recommendations for both technical and non-technical stakeholders.
Provide day-to-day direction, coaching and mentoring project teams. You will also be responsible for career management, professional development, and supporting employees through Optimus SBRâ€™s Career Development Program (CDP).
Lead cross-functional teams and drive technology, risk, and security initiatives through to completion.
Manage project team performance, workload, priorities, and quality while creating an environment that supports collaboration and professional growth.
Contribute to business development through proposal development, opportunity identification, client relationship building, and participation in sales activities.
Contribute to the growth and development of Optimus SBRâ€™s Technology Services practice through thought leadership, methodology development, knowledge sharing, and internal initiatives.
Contribute to the life and culture of Optimus SBR.