Technology Risk Manager

BRP•Montreal, QC

1d•Hybrid

About The Position

We are seeking a highly motivated Technology Risk Manager to strengthen our global risk management capabilities. This role will be the guardian of our Technology Risk Management methodology and risk register, ensuring consistency, operational excellence, and value delivery across the enterprise. The Manager will drive the continuous improvement of the Technology Risk Management framework, oversee the Third-Party Risk Management (Tech TPRM) process, and ensure timely delivery of monthly metrics and performance reports. Acting as the bridge between Risk Analysts and Cyber Advisory, this leader will manage ad hoc risk assessments and guide the team in identifying, evaluating, and reporting on technology risks.

Requirements

Bachelor’s degree in Information Security, Risk Management, or a related field; advanced degree or certifications (e.g., CRISC, CISM, CISSP) are a strong asset.
Solid experience in technology risk analysis (quantitative and qualitative).
Strong knowledge of NIST Risk Management Framework (NIST RMF), ISO 27001 standards, and the FAIR methodology for quantitative risk analysis.
Previous experience working closely with Advisory teams on risk, security, or compliance topics.
Demonstrated ability to prepare and deliver executive-level reports on IT residual risks.
Strong understanding of IT and OT internal controls, SOx compliance, and related governance frameworks.
Proven leadership skills with the ability to guide and inspire a team of analysts.
Excellent communication and interpersonal skills, with fluency in both English and French.
Ability to work on-site 3 days per week at Montreal, Sherbrooke, or Valcourt.

Responsibilities

Lead the Technology Risk Management team, ensuring effective collaboration and delivery.
Evolve and manage the Technology Risk Management framework and methodology.
Oversee and operationalize the technology risk register, ensuring risks are logged, assessed, tracked, and reported accurately.
Drive the Tech TPRM process, ensuring vendor risk assessments and mitigation plans are consistently executed.
Produce and present executive reports on residual IT risks and key risk indicators to senior stakeholders.
Support ad hoc and project-based risk assessments, in close alignment with Cyber Advisory.
Partner with IT/OT Compliance teams to align on action plans related to internal IT and OT controls.
Establish and track monthly metrics to monitor program effectiveness and team performance.