Senior IT Risk Specialist - IT Audit and GRC

Job Description

Senior IT Risk Specialist - IT Audit and GRC
On behalf of our Banking client, Procom is searching for a Senior IT Risk Specialist - IT Audit and GRC for a 6-month role. This position is a hybrid position with 4 days onsite at our client’s Toronto office.

Senior IT Risk Specialist - IT Audit and GRC - Job Description:
The project involves governance, risk, compliance, and issue remediation oversight to support the banks’s Global Technology Solutions strategy. The role requires partnering with Technology segments to provide independent challenge and oversight of issue remediation plans, impacting the information security control environment.

Senior IT Risk Specialist - IT Audit and GRC - Responsibilities:
• Lead assessments of audit and regulatory finding remediations within technology infrastructure and applications.
• Provide advice and guidance on Audit & Assurance Standards, IT Risk Governance Control Frameworks, and GRC frameworks.
• Contribute to the development of mature Governance Oversight & Control practices.
• Identify emerging themes and provide specialized business management advice to senior management.
• Lead continuous improvement projects using agile/lean practices.

Senior IT Risk Specialist - IT Audit and GRC - Mandatory Skills:
• Very strong communication skills – written and verbal.
• 10+ years as an IT Risk Specialist with experience in governance, risk, and compliance management.
• Professional audit, risk, information security, or technology control certification (e.g., CISA, CRISC, CIA).
• Formal training or demonstrated competency in audit testing techniques and issue remediation validation.
• Attention to detail.

Senior IT Risk Specialist - IT Audit and GRC – Nice-to-Have Skills:
• Six Sigma certification.
• CISSP certification or equivalent experience.
• AI security/risk experience or tools.
• Experience with ServiceNow.

Senior IT Risk Specialist - IT Audit and GRC – Assignment Length:
This is a 6-month contract with the possibility of extension or conversion to a permanent position.

Senior IT Risk Specialist - IT Audit and GRC - Start Date:
ASAP.

Senior IT Risk Specialist - IT Audit and GRC - Assignment Location:
Toronto, Ontario, Canada, with a hybrid work arrangement requiring 4 days in the office.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.