Previous Job
Previous
IT - Security Specialist x 2
Ref No.: 18-05605
Location: Toronto, Ontario
Job Title: IT - Security Specialist X 2 - 27825
Duration: 09/04/2018 to 03/01/2019

Location: Toronto

Job Description:

SUMMARY OF DAY TO DAY RESPONSIBILITIES:

Bank has commenced a project to take our Technology Risk Reporting to the next level. This includes updates to the people, process, and technology that supports our existing Technology Risk Reporting process. We are looking for talented individuals that have a strong background in data analytics, Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), and business process design and improvement.
About This Role
We are looking for someone to support our Technology Risk and Reporting Oversight team by contributing to Technology Risk Reporting Process Design & Metric Release Management. Here's some of what you may be asked to perform:

• Defining requirements for the Technology Risk Reporting metric and data layer
• Analyzing source data and facilitating Technology KRI and metric design
• Managing and refining business rules and thresholds for Technology KRs
• Facilitate the change management and communication process for technology risk reporting and metrics

Job Requirements

• Experience with Key Risk Indicators and Technology Risk reporting
• Must be proficient with technology tools including MS Office, databases and reporting tools, including Tableau.
• Experience with SharePoint and InfoPath
• Information Security Certification / Accreditation an asset.
• Experience in a highly regulated environment, specific experience with FFIEC, OSFI, PCI-DSS, SOX.
• Competencies in technology controls, emerging threats, information security and cybersecurity.
• Comfortable communicating at all levels of the organization, strong presentation skills a must.
• Information Security or technology risk and controls background, Big Four experience a plus.
• Ability to manage multiple efforts simultaneously, strong project management, reporting, and organizational skills.
• CISSP, CISA, CRISC certifications a plus.
• Expert knowledge of IT security and risk disciplines and practices.
• Knowledge of organization, technology controls, security and risk issues.
• Demonstrated ability to participate in complex, comprehensive or large projects and initiatives.

MUST HAVES:

1.) Information Security or technology risk and controls background – 7+ years
2.) Data Analytics Experience – 5+ years
3.) MS Office for data analytics and reporting – 5+ years
4.) Tableau for data analytics and reporting – 2+ years
5.) Sharepoint experience – 5+ years
6.) InfoPath experience – 5+
7.) Experience with Key Risk Indicators and Technology Risk reporting – 5+ years
8.) Experience developing Key Risk Indicators (KRIs) or infosecurity metrics
9.) Experience with FFIEC, OSFI, PCI-DSS, SOX security frameworks – 5+ years
10.) Business process improvement experience - 2+ years
10.) Excellent Communication skills

NICE TO HAVE:

1.) Previous Banking/Financial Industry experience
2.) CISSP or CRISC certification ***
3.) Experience facilitating the change management and communication process for technology risk reporting and metrics