Permanent Full Time - <div> <div> We are seeking a Manager, Technology Risk & Controls, to lead governance, monitoring, and reporting across assigned Technology portfolios. This role focuses on developing actionable risk and security insights through structured risk profiling. </div> <div> Reporting to the Director, this first line (1B) role acts as a trusted advisor, translating complex risk data into clear, actionable insights that inform senior leadership decisions, support business objectives, and strengthen the organization’s Information Security & Technology Risk (ISTR) posture. </div> <div> Key responsibilities include, but are not limited to: </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Own and deliver portfolio-level risk profiles by consolidating risk and security insights across assets, initiatives, and key domains, including Cyber/Information Security, Technology Operations, and Technology Delivery. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Develop and maintain standardized, executive-ready risk reporting, including KRIs/KPIs, thematic risk views, issue trends, policy exceptions, and control health indicators. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Drive end-to-end governance of portfolio risk reporting, ensuring data quality, integrity, and consistency across inputs from multiple stakeholders and process owners. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Partner with technology process owners, data owners, and delivery teams to ensure timely, accurate, and complete inputs into risk reporting. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Act as a central coordination point across Technology, ISTR, Audit, and second line of defense (2LOD) functions, ensuring alignment and a consistent risk narrative. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Engage with 2LOD oversight functions to incorporate independent challenge and regulatory expectations into reporting outputs. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Collaborate with SMEs across CIO and CISO organizations to align risk reporting with enterprise priorities and emerging risk themes. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Present portfolio risk posture, key themes, and emerging risks to senior leadership, demonstrating strong executive presence and influencing decision-making. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Provide effective review and challenge of risk inputs (e.g., issues, audit findings, control statements) to ensure accuracy and completeness in executive reporting. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Continuously enhance reporting capabilities through automation, visualization, and improved storytelling. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Promote a transparent, risk-aware culture by improving visibility and understanding of technology and information security risks. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Assist with internal policy risk assessments to ensure compliance with standards and regulations. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Assist with internal, external and regulatory audit responses, including stakeholder engagement and evidence collection </li> </ul> </div> <div> What You Will Bring: </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> 8–10 years of experience in financial services or another regulated industry. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> 8–10 years of progressive experience in technology risk, information security, regulatory compliance, or IT governance. </li> </ul> </div> </div> <div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> 3–5+ years of leadership experience (preferred). </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Bachelor's degree in computer science, Information Systems, Engineering, or related field, or equivalent experience. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Strong understanding of technology risk, information security, Enterprise Risk Management framework, and regulatory requirements (e.g., OSFI, CIRO), as well as industry standards (COBIT, NIST, ISO, SOC 2). </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Proven ability to analyze and translate risks in a business context. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Demonstrated continuous improvement mindset. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Excellent written and verbal communication skills. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Strong stakeholder management skills, with the ability to influence and build consensus. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Intellectual curiosity and commitment to ongoing learning in technology and risk governance. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Understanding of large enterprise operating models in regulated environments. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Understanding PowerBI and automation tools or platforms would be an asset. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Preferred certifications: CISA, CRISC, CISM, or CISSP. </li> </ul> </div> <div> <ul style="list-style-type:disc"> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:dimgray"> Experience with GRC tools (e.g., ServiceNow IRM, MetricStream). </li> </ul> </div> </div>- The base salary for this position is between $124,300- $155,300 annually. This represents base salary only and does not represent other variable compensation components of our total compensation ( i.e. annual bonus, commission etc). If you are selected to move forward in our recruitment process, your recruiter will be able to discuss additional details of our total rewards program with you. Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis. Grow with Canada Life We’re united by a shared purpose: to improve the financial, physical and mental well-being of Canadians. Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country. We’re looking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers, communities and each other. Are you someone who always strives to do the right thing, who steps up for themselves and others, and who delivers with impact? Then we want to hear from you! What we offer: We’re committed to supporting our employees through every stage of their career. Here’s what you can expect as a full-time or part-time permanent team member: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to $2,000 annually towards education reimbursement. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Health & Wellness: Flexible health and dental benefits, plus a $5,000 mental health benefit to support your well-being. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Time Off: In addition to regular vacation and personal days, we support community involvement with a volunteer day. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Financial Security: Company-matching pension plan, share ownership program and additional investment options. </li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Rewards and Recognition: Employee recognition programs, service milestone celebrations, employee discounts and more! </li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif;color:dimgray">Emphasis on Community: We provide a workplace where employees feel connected and supported through Employee Resource Groups (ERGs), mentorship programs, social clubs and events. </li> </ul> Learn more about <a style="color:dimgray" href="https://www.canadalife.com/about-us.html" target="_blank" rel="noopener">Canada Life</a>. We’re committed to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact <a style="color:dimgray" href="mailto:[email protected]" target="_blank" rel="noopener">[email protected]</a>. All information provided will be handled in accordance with applicable laws and Canada Life policies. Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted. #LI-Hybrid

Manager, Technology Risk and Controls (Toronto, ON, CA) @ The Canada Life Assurance Company

About this role

Ready to apply?