Manager, Technology Risk Management

Join to apply for the  Manager, Technology Risk Management  role at  KPMG Canada

Overview
At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause turning insight into opportunity for clients and communities around the world. Our Technology Risk Management group in Business Enablement Services is looking for a Risk Manager to join our team. The group oversees how the firm manages risk in deploying technology. The Risk Manager will help execute the globally mandated risk management process overseen by the Canadian Quality & Risk Management Technology Risk team.

The Risk Manager will support the identification, assessment, and mitigation of risks associated with the use of technology. This role interacts with members within Technology Risk Management, as well as Client Service business lines and other Risk Stakeholders responsible for areas such as Legal, Privacy, Independence, Information Security, Architecture, IT Support & Maintenance, Quality Assurance, and Strategic Risks.

What You Will Do
Facilitate Technology Risk Assessment Submissions and Respond to Consultations

Gain a thorough understanding of risk assessment requirements and processes and advise business requesters to improve submission quality

Stay updated on new technologies, e.g. artificial intelligence systems, and ensure risk processes are properly applied

Gather information on technology tools to ensure the accuracy and completeness of technology risk assessment submissions

Assist business and risk stakeholders with risk submissions, as required, by gathering necessary information, inputting details into the workflow platform, and responding to needs to complete the assessment process

Collaborate with business and risk stakeholders to provide required support during consultations

Perform initial review of risk submissions, sign‑offs, and supporting documentation to ensure relevant risks are assessed and addressed

Monitor and Facilitate the Timely Completion of Technology Risk Tasks and Approvals

Collect and track status information from key contacts

Monitor the completion of action items to ensure timely technology risk assessment approval

Liaise with stakeholders to identify delays and escalate to Technology Risk management, if needed

Use Service Now and other tools to track technology risk assessment submissions, and report status

Project manage multiple assessments and keep Technology Risk management informed of progress on a regular basis

Troubleshoot delays in the technology risk assessment process and develop solutions to resolve them

Conduct Technology Risk Assessments

Draft risk assessment summaries for review and approval

Present significant risks or complex findings regarding Legal, Privacy, Independence, Information Security, Architecture, IT Support & Maintenance, Quality Assurance, Strategic Risks, and Artificial Intelligence

Quality Assurance over Risk Assessments

Assist in responding to internal Global Quality Management assessments related to Technology Risk Management

Support Technology Risk Initiatives

Provide support on ad‑hoc initiatives to enhance the efficiency and effectiveness of the Technology Risk Assessment process

What You Bring To

The Role

Post‑secondary degree in a relevant field such as Business, Information Technology, Cybersecurity, Computer Engineering, Risk Management, Audit, or Compliance

Certifications such as CISA, CRISC, CISM, and CISSP, ISO 27001 Lead Implementer/Lead Auditor are highly valued

MBA or CPA designation is an asset

A strong foundation in business processes, risk assessment, and IT systems. 5+ years of relevant experience in identifying and assessing information technology or business process risks and controls, preferably within a professional services firm or a large organization

Demonstrated business acumen and comprehensive understanding of computing environments, enterprise architecture and IT risks and controls

Familiarity with legal and privacy aspects of technology risk is an asset

Possess a client‑centric and service delivery approach, capable of establishing effective communication and building a strong rapport with diverse teams

Experience in handling…