IT Risk Management Specialist

BDC

. Support first- and second-line stakeholders in Operational Risk Management programs, including RCSA, KRI, Operational Risk Events, BCM, Risk Appetite activities, and risk assessments for new products, projects, and business initiatives .

Posted 10/21/2026full-timeMontreal • CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Technology Risk Management, Information Security, and Operational Risk Management while effectively managing stakeholder relationships and enhancing governance practices. Proficient in analyzing complex business requirements and translating them into actionable risk management strategies.

Highest-signal resume keywords

Technology Risk ManagementInformation Security Risk ManagementOperational Risk ManagementAdvanced Microsoft Excel SkillsBilingual Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technology ResilienceData Risk ManagementDigital Technology RiskEmerging Technology RiskGovernance, Risk, and Control FrameworksRisk AssessmentRisk MitigationAnalytical SkillsQuantitative SkillsPresentation Skills

Soft Skills

Strong Planning SkillsCoordination SkillsOrganizational SkillsJudgment in Risk IdentificationRelationship Building

Tools & Technologies

Microsoft Office SuiteMicrosoft WordMicrosoft PowerPointMicrosoft Visio

Industry Keywords

Operational Risk Management ProgramsRCSAKRIRisk AppetiteFirst Line of DefenceSecond Line of DefenceContinuous ImprovementGovernance DocumentsMulticultural EnvironmentAI Tools

About the role

Key responsibilities & impact

Support first- and second-line stakeholders in Operational Risk Management programs, including RCSA, KRI, Operational Risk Events, BCM, Risk Appetite activities, and risk assessments for new products, projects, and business initiatives
Review and challenge Information Security and Technology risk assessments completed by the first line of defence
Review and challenge operational risk events related to Information Security and Technology
Monitor remediation activities and action plans to ensure risks are addressed effectively
Recommend enhancements to technology risk assessment methodologies, processes, and tools
Support continuous improvement of ORM practices in alignment with operational realities and industry best practices
Manage ORM reporting activities, including data collection and analysis, risk reporting, action plan tracking, and committee and governance presentations
Develop and maintain relationships with first-line leadership, second-line risk functions, and senior management
Develop, maintain, and enhance ORM governance documents, procedures, and methodologies
Coach and mentor junior team members
Contribute to initiatives supporting BDC’s mission of helping Canadian entrepreneurs succeed while maintaining sound risk management practices

Requirements

What you’ll need

Bachelor’s degree in Information Technology, Communications, Business Administration, Social Sciences, or a related discipline
Minimum five (5) years of experience in Technology Risk Management, Technology Resilience, Technology Audit, Information Security Risk Management, or related risk management disciplines
Demonstrated expertise in IT Operations, Information Security (InfoSec), Data Risk Management, Digital Technology Risk, or Emerging Technology Risk
Knowledge of governance, risk, and control frameworks, including the Three Lines of Defence model
Experience reviewing, assessing, and challenging technology and information security risks
Experience monitoring remediation plans, corrective actions, and risk mitigation activities
Ability to analyze complex business requirements and translate them into risk management considerations
Strong analytical and quantitative skills
Advanced Microsoft Excel skills
Excellent written and verbal communication skills in both French and English
Experience preparing and delivering presentations to stakeholders and senior leaders
Ability to work effectively with senior stakeholders and provide credible challenge when required
Ability to manage multiple priorities and work in a fast-paced environment
Strong planning, coordination, organization, implementation, and training skills
Demonstrated judgment in identifying, escalating, and mitigating risks that may impact business operations
Ability to meet deadlines and work effectively in a multicultural and bilingual environment
Proficiency with Microsoft Word, Microsoft PowerPoint, Microsoft Visio, and Microsoft Office Suite
Ability to build trusted relationships with internal stakeholders
Ability to clearly explain risk management initiatives and gain stakeholder engagement
Demonstrated ability to leverage AI tools to improve efficiency and enhance the quality of work products

Benefits

Comp & perks

Flexible and competitive benefits
Employee Savings and Investment Plan with employer matching of voluntary contributions
Defined Benefit Pension Plan
$750 wellness and health care spending account
Paid vacation each year
Five personal days
Sick days as necessary
Offices closed from December 25 to January 1
Hybrid work model
Opportunities for learning, training and development