AVP Technology Risk

Technology redefines the way we work and deliver to meet business needs and elevates the customer experience. You’ll be part of an organization that is embracing modern technology, innovation and agile ways of working.    

Our Canada Technology team is a strategic partner in our business – with an ambition to be a forward-thinking, agile technology organization delivering secure, resilient and leading solutions that support Canada Life and the well-being of millions of Canadians.  

We are looking for an AVP, Technology Risk.  

The AVP, Technology Risk is a First Line of Defense (1B) role and reports to the VP, Business Information Security Officer and Head of Technology Risk for Canada Life. 

This role will work with senior leadership in executing proactive and effective Technology risk management practices across the Canada Technology organization, helping technology teams embed a risk management culture into delivery and support as technology drives toward meeting business objectives.  This includes providing a holistic view of the organization’s overall technology risk posture and helping us operate within the risk appetite established for Technology Risk.   

Further, this role will be responsible for leading the continued development, adoption and operationalization of technology risk practices, controls and operating standards working closely with enterprise risk partners; ensuring that technology risks are clearly understood, controls are implemented to mitigate those risks, and continuous monitoring is established to measure control effectiveness. 

The role will have a matrix reporting relationship with the holding company VP, Technology Risk Governance and Control for Great-West Lifeco. 

What you will do   

• Provide leadership and direction for the company to advance Technology Risk Governance policies, practices and operating model  

• Oversee the design, implementation, maturity, and continuous monitoring of technology risk controls that reduce a broad spectrum of technology operational risks  

• Build and maintain a governance structure with appropriate committees and stakeholder groups  

• Lead the development and adoption of policies and operating standards; enforce compliance and run ongoing monitoring of compliance with policies and standards across all levels of the organization  

• Lead the development and evolution of Canada Life’s technology issues and audit management processes for identification, tracking, and timely remediation of technology risk issues. 

• Partner with Technology leaders to develop business cases for the introduction, or expansion of risk capabilities and services governance  

• Lead the Technology Risk & Control identification process across Canada, supporting the 1A teams in implementation of controls and conducting Risk and Control Assessment across Canada  

• Advance innovation strategy including automated control testing and the use of AI  

• Contribute to the development and implementation of key risk indicators (KRIs), control indicators, and reporting to measure risk posture and highlight areas of concern  

• Foster, advocate for, and strengthen Canada Life’s overall technology risk posture   

• Lead a Line 1B team of technology risk professionals to achieve and surpass personal and team objectives  

• Coordinate technology risk activities including supporting audit activities such as ITGC reporting and regulatory and related compliance reporting 

• Support audit activities including ITGC testing  

What you will bring    

• 10+ years’ experience in a similar technology risk leadership position  

• 5-10 years of experience in varied senior security related leadership positions would be an asset.  

• 5-10 years of experience of in the financial services industry or in a large organization  

• 5-10 years of experience within the area of risk, compliance or governance specific to Information Services.  

• Understanding of technology risk regulatory, best practices and industry best practices  

• Experience building and working in matrix and complex organizations with demonstrated ability to influence teams where resources do not all report directly into the function.  

• Skilled leader with exceptional communication abilities, collaboration and relationship building skills establishing credibility and fostering cross-functional relationships.  

• Strong verbal and written communication skills and interpersonal skills needed to effectively build relationships and communicate with Executives, internals stakeholders, and customers.  

• Constant learner and passion for technology and risk governance  

• Deep understanding of how large enterprise organizations work, within in a regulated environment  

• Proven ability to identify, analyze and translate risk in the context of what it means to achieving business objectives  

• Familiarity working with a Business Information Security Office (BISO) model  

• Ability to attract, motivate and develop talent to build the right team to meet strategic direction and tomorrow’s needs  

• Extensive knowledge of Cyber and Technology Risk Governance and Control frameworks/standards (i.e., COBIT, ISO 27001, NIST CSF, ITL, etc.)  

• Certifications in CISSP, CISA, CISM, CRISC would be an asset