Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure.
We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of.
This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits. If you share the same sense of infinite possibility, come shape your future at Questrade.
We’re looking for our next Senior Manager IT and Cyber Risk and Control. Could It Be You?
The purpose of the Senior Manager IT and Cyber Risk and Control is responsible for leading activities related to the IT and Cyber Risk and Control program. This role is vital to supporting the development, implementation, monitoring and reporting mechanisms that highlight and manage risk exposure and opportunities for effective control of technology and business risks arising from the use of technology, including from use of technology service providers. The Senior Manager, IT and Cyber, Risk and Control is expected to work collaboratively with other areas across enterprise IT, Cyber Security and Security Operations. As a focal point for IT and Cyber, Risk and Control you support the Head of IT and Cyber for Banking and Mortgage Operations in the collection, preparation and presentation of material related to IT and Cyber risk to various Committees and the Board.
What’s it like working as a Senior Manager IT and Cyber Risk and Control at Questrade?
Leads the IT and Cyber Risk and Control team.
Leads the implementation and operation of the IT and Cyber framework, tools, processes and methodologies.
Develops reports, dashboards and presentations on IT and Cyber Risk and Control for oversight and management committees ensuring documents are accurate and timely to facilitate informed decision making.
Leads the development, collection, analysis and aggregation of IT and Cyber performance and risk metrics.
Leads the review of third parties and their programs for management of IT and Cyber risk to assess potential impacts on the company.
Leads the development, review or revision of policies, standards and procedures for IT and Cyber Risk Management.
Develops, implements or coordinates execution of a diverse set of Risk and Control Assessments and maintains the IT and Cyber Risk Register.
Maintains subject matter knowledge and awareness of legislative, legal and statutory changes relating to information technology, cybersecurity and data protection.
Lead the coordination, completion and response to internal / external audits and regulatory examinations of Information Technology and Cybersecurity.
Collaborates cross-functionally with other areas of enterprise risk and control to understand and share current and emerging risk.
Need more details? Keep reading…

Knowledge & Skills

• 10+ years of experience in information technology Internal Audit, Risk Management and/or Compliance in a financial institution.
• 5+ years of hands-on information technology or security operations experience.
• Holds one or combination of CISA, CRISC, CISSP, GGEIT or equivalent.
• Knowledge and experience working with data, cybersecurity, information security, compliance and privacy laws in Canadian financial industry.
• Experience writing or updating IT and Security governance documents, policies and standards.
• Experience building key performance and risk indicator dashboards for different management levels.
• Experience with preparation and/or review of SOC-1 and SOC-2 reports.
• Knowledge of a broad set of industry best practices (COBIT, ITIL, NIST CSF, Cloud CSC, Agile SAFE, PCI-DSS, etc.)
• Exposure to enterprise and operational risk principles and practices.
• Strong leadership capability, executing as appropriate in the areas of responsibility.
• Expertise in budget planning, financial management and workforce management.
• Broad knowledge of current and emerging technologies, technology directions, and strategic application to business needs, including the ability to differentiate between a relevant trend and hype.
• Ability to improve operational efficiency, service delivery and information management across the IT organization and wider enterprise.
• Excellent oral and written communication skills, including the ability to explain technology solutions in business terms, establish rapport and persuade others.

So are YOU our next Senior Manager IT and Cyber Risk and Control? You are, if you have…

Key Competencies

• Building Relationships - Maintains and forms alliances with recognized experts and with decision makers. Draws on a wide base of relationships inside and outside the work environment.
• Business Enterprise Knowledge - Has strong business acumen and business planning skills. Solicits information on enterprise direction, goals and industry.
• Results Orientation - Sets and accomplishes challenging goals. Defines standards in terms of doing what is appropriate and doing it well. Competes resourcefully, and takes calculated risks to achieve results.
• Team Leadership - Develops, directs, coaches, mentors and reinforces team members in line with the mission, vision, values, goals and performance standards of formal and informal teams.

LI-JW1 #LI-Hybrid

Sounds like you? Click below to apply!
At Questrade Financial Group of Companies, with multiple office locations around the world, we are committed to fostering a diverse, inclusive and accessible work environment. This is an environment where individuals are treated with dignity and respect. Here, the unique skills and experience you bring will be valued. You will be supported and motivated, so that you can harness your unlimited potential. Our team reflects the diversity of the communities we serve and operate in. Having a collaborative and diverse team helps us push boundaries to bring the future of fintech into existence—not only for the benefit of our customers, but for those who build their career with us.
Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment/selection process, please let us know and we will work with you to meet your needs

Please refer the Job description for details