Director, Technology Risk

This role supports the VP, Technology Risk by performing comprehensive assessments across key IT domains to identify and mitigate cyber and technology risks. The director will implement enterprise-aligned IT risk management standards and provide executive-level risk reporting to support the organization’s resilience.

• Support the VP, Technology Risk with comprehensive risk assessments of IT domains
• Lead implementation of globally aligned Enterprise IT Risk Management framework standards and policies
• Provide subject matter expertise and technical guidance to technology-aligned process owners
• Collaborate to develop and implement automated risk reporting (KRIs, control indicators) for executive insights
• Support compliance requirements for OSFI, DORA, NYDFS, MAS and mitigate compliance/operational risks

The position focuses on cyber and technology risk management across IT asset management, encryption/cryptography, network infrastructure, cloud security, IT service management, disaster recovery, vulnerabilities, patch and configuration management, and AI risks. It includes building automated risk reporting using key risk indicators (KRIs) and control indicators and aligning risk frameworks across the enterprise.

The ideal candidate is a senior technology and cyber risk professional with 9+ years of experience in 1st line cyber and tech technical roles, IT risk management, audit, and risk programs process automation. They have strong technical knowledge across IT domains (including cloud security, vulnerabilities, patching, and disaster recovery) and can lead the implementation of an Enterprise IT Risk Management framework while delivering executive-ready risk reporting.