IT Risk Specialist - IT Audit, GRC

Job Description

IT Risk Specialist - IT Audit, GRC:
On behalf of our Banking client, Procom is searching for an IT Risk Specialist - IT Audit, GRC for a 6-month role. This position is a hybrid position with 4 days onsite at our client’s Toronto office. 

IT Risk Specialist - IT Audit, GRC - Job Description:
This role involves providing governance, risk, compliance, and issue remediation oversight to support the bank’s Global Technology Solutions strategy. The project focuses on independent challenge and oversight of issue remediation plans affecting the information security control environment.

IT Risk Specialist - IT Audit, GRC - Responsibilities:
• Conduct sample-based testing to validate audit and regulatory remediation activities.
• Perform quality assurance assessments using a QA rubric and professional judgement.
• Lead independent, risk-focused reviews to ensure effective risk mitigation and remediation.
• Provide advice on Audit & Assurance Standards and IT Risk Governance Control Frameworks.
• Contribute to the development of Governance Oversight & Control practices.
• Lead AI-enabled assurance transformation projects.

IT Risk Specialist - IT Audit, GRC - Mandatory Skills:
• Very strong communication skills – written and verbal.
• 10+ years of experience in IT Risk within regulated industries.
• Professional audit or risk certification (e.g., CISA, CRISC).
• Competency in audit testing techniques and evidence evaluation.
• Experience with AI-enabled assurance transformation.

IT Risk Specialist - IT Audit, GRC – Nice-to-Have Skills:
• Six Sigma certification.
• CISSP certification or equivalent experience.
• Experience with AI security/risk tools.
• Familiarity with ServiceNow.

IT Risk Specialist - IT Audit, GRC – Assignment Length:
This is a 6-month contract position with the possibility of extension or conversion.

IT Risk Specialist - IT Audit, GRC - Start Date:
ASAP.

IT Risk Specialist - IT Audit, GRC - Assignment Location:
Toronto, Ontario, Canada; hybrid work arrangement with 4 days in the office.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.