GRC-Risk Assessment

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

About The Role We are looking for an experienced

Tech & Cyber Risk Assessment Specialist to join our Cyber, Data, and Security team. This role focuses on enterprise-wide technology risk assessments, identifying control gaps, and driving remediation initiatives across business and technology functions. Key Responsibilities

• Conduct Technology Risk Assessments including: + Inherent Risk Assessment + Residual Risk Assessment + Control Gap Analysis
• Perform enterprise-wide EUC (End-User Computing) risk assessments
• Use Archer GRC tool for managing and executing risk assessments
• Identify control gaps and recommend effective mitigation strategies
• Track, monitor, and support remediation of identified risks
• Collaborate with stakeholders across Business, Technology, and Risk teams
• Analyze and address thematic enterprise risk issues
• Perform assessments aligned with frameworks such as: + ISO 27001, NIST, COBIT
• Ensure high-quality documentation including: + Risk reports + Findings + Recommendations

✅ Required Experience

• 4–10 years in: + Information Security + Technology Risk Management + Governance, Risk & Compliance (GRC)
• Hands-on experience in: + Inherent Risk & Control Gap Assessments
• Strong understanding of: + Risk Management & Governance principles
• Experience working with cross-functional stakeholders
• Excellent verbal and written communication skills ️ Must-Have Skills
• Solid experience in Tech Risk Assessments
• Strong knowledge of Information Security & Risk Governance
• Hands-on expertise with Archer GRC tool
• Proficiency with: + MS Excel, JIRA, SharePoint, M365 suite
• Strong analytical and communication skills ⭐ Nice-to-Have Skills
• Exposure to regulatory frameworks: + OSFI, OCC, etc.
• Experience in Financial Services domain
• Experience working with cross-border/global teams
• Certifications (preferred): + CRISC + CISSP
• Knowledge of frameworks: + ISO 27001, NIST, COBIT Why Join Us?
• Work on enterprise-scale cybersecurity initiatives
• Collaborate with global teams across business and technology
• Opportunity to influence risk posture at an organizational level
• Continuous learning in evolving cyber risk landscape