Senior IT Risk & Controls Specialist

Closing Date (MM/DD/YYYY):

Worker Type:

Language(s) Required:

Term Duration (in months):

Salary Range (plus eligible to receive a performance based incentive applicable to position) :

Why FCC

At FCC were proud to be 100% invested in Canadian agriculture and food. As a federal Crown corporation we provide financing knowledge resources and business management software to over 103000 customers nationwide.

Heres what you can expect when you join our team:

• Competitive total rewards packages: market-aligned and performance-based salary and incentive programs flexible and comprehensive group benefit and savings plans and well-being support through benefits and wellness programs

• Purpose-driven work: We build strong relationships share knowledge and support the people who feed the world

• Growth: Learning and development opportunities to help you thrive

• Hybrid work options

How youll make an impact

As a Senior IT Risk and Controls Specialist youll play a key role in strengthening FCCs IT risk management practices by helping teams understand risk apply effective controls and continuously improve how we manage and report on risk across the organization.

Youll be part of a collaborative risk and controls team that supports information management cybersecurity and privacy outcomes. Working closely with IT delivery teams business partners and second- and third-line risk partners youll help translate complex risk concepts into practical guidance meaningful reporting and effective control testing and monitoring.

If you enjoy working across teams simplifying complexity and influencing how risk is managed in a fastchanging IT environment this could be the role for you.

What youll do

• Plan and execute design and operating effectiveness testing of IT cybersecurity privacy and information management controls
• Conduct process walkthroughs with control owners to understand endtoend control execution
• Review validate and assess control evidence to determine effectiveness and identify gaps
• Support ongoing control monitoring including tracking issues remediation progress and emerging risks
• Consolidate testing results and develop clear riskbased reporting and key control indicators
• Advise IT delivery teams and control owners on control design documentation and remediation activities
• Coordinate and respond to second and thirdline requests including audits and reviews
• Contribute to the continuous improvement of control testing and monitoring practices

What youll bring to the team

Required qualifications:

• A bachelors degree in computer science commerce business administration or a related field
• Minimum five years of progressive experience in IT risk management technology risk audit or a related field (or an equivalent combination of education and experience)
• Advanced knowledge of IT risk management practices methodologies processes and emerging trends
• Solid understanding of IT general controls (ITGCs) and control design and effectiveness
• Proven experience providing risk guidance and advisory support to technology or delivery teams
• Experience supporting control testing monitoring and risk reporting activities
• Risk management or related professional certification (or working toward one)

Preferred qualifications:

• Knowledge of agriculture lending or financial services environments
• Experience supporting learning and awareness programs related to IT risk cybersecurity or privacy
• Familiarity with three lines of defence risk management models

Not sure you meet every requirement We encourage you to apply anyway.