Senior Associate, Risk - Technology Services Group

Optimus SBR•Toronto, ON

2d•CA$100,000 - CA$130,000•Hybrid

About The Position

Continued growth has created an exciting opportunity for an Associate/Senior Associate to join our Technology Services Group. The successful candidate will have the opportunity to collaborate, build, and succeed as part of a high-performing team of professionals with diverse backgrounds and a passion for growing businesses—both ours and our clients’. This role requires a strong foundation in technology delivery and risk management, achieved through experience in designing, developing, and/or delivering technology-enabled business solutions, as well as assessing and mitigating technology risks. The ideal candidate will combine technical delivery expertise with a consulting mindset, enabling them to engage senior stakeholders, support cross-functional teams, and deliver security-focused initiatives.

Requirements

6+ years of experience in technology risk, IT audit, cybersecurity, control testing, regulatory compliance, or advisory consulting.
Strong understanding of IT and business controls, including experience assessing control design or operating effectiveness.
Experience reviewing policies, procedures, risks, and controls and identifying gaps or standardization opportunities.
Knowledge of frameworks such as COSO, COBIT, NIST CSF, or ISO 27001.
Strong analytical, project-management, communication, and client-engagement skills.
Ability to coordinate workstreams and provide direction and quality review to junior resources.
University degree in business, accounting, technology, cybersecurity, or a related discipline.

Nice To Haves

Certifications: CPA, CRISC, CISSP, CISA, CISM.
Understanding of Canadian and US regulators (OSFI, OCC, FRB).
Experience with SOC and SOX reporting.
Previous experience in a 1LoD or 2LoD role.
Experience with control rationalization, regulatory mapping, procedure development, or identifying automation opportunities.
Familiarity with GRC, analytics, and automation tools.
Big 4 or consulting firm background.

Responsibilities

Support project scoping, approach design, work planning, team structure, and effort and timeline estimation.
Deliver technology risk and advisory engagements within agreed scope, timelines, budgets, and quality expectations.
Facilitate client meetings and develop clear reports, presentations, recommendations, and other deliverables.
Identify, manage, and escalate project risks, issues, dependencies, and resource constraints.
Support a range of technology risk, cybersecurity, regulatory, governance, and controls advisory engagements.
Identify and assess technology risks and evaluate the effectiveness of associated governance, processes, and controls.
Apply recognized risk and control frameworks to assess client environments and develop practical recommendations.
Review policies, standards, procedures, risk assessments, and control documentation for completeness, consistency, and alignment.
Support regulatory and industry-standard assessments, including evaluating whether relevant risks and requirements are appropriately addressed.
Identify opportunities to strengthen, standardize, rationalize, or automate risk and control activities.
Demonstrate an understanding of control design and operating effectiveness, including control objectives, testing approaches, evidence requirements, and documentation of conclusions.
Support control assessment and testing activities across IT general controls, application controls, business controls, and technology-dependent controls.
Provide day-to-day direction, coaching, and mentoring of junior team members.
Lead cross-functional teams and drive security initiatives to completion.
Contribute to business development, client delivery, and practice growth.
Support employee growth through Optimus SBR’s Career Development Program (CDP).