Specialist, Technology Risk and Operations Oversight

About CMHC

At CMHC, the work you do and the work we do together matters. We come to work every day with a common purpose: to realize a future where everyone in Canada has a home that they can afford and meets their needs.

Our people are second to none. We lean in with courage, band together as a community and try new things to make a lasting impact on housing from coast to coast to coast.

Join us and be part of a team that's committed to making a real difference and be part of something meaningful.

What's in it for you

We've got the purpose, the people and the perks you need for a fulfilling career. Here's what you get when you're a permanent employee:

• 5 weeks of vacation.
• Annual individual performance bonus.
• Defined benefit pension plan.
• Comprehensive group insurance plan to support your well-being from day one.
• Support in your personal and professional growth with training, mentorship and more - because when you thrive, we thrive.
• An inclusive workplace culture and environment with Employee Resource Groups and more.
• A hybrid work model that lets you balance working from home and nurturing in-person connections by coming into your region's office at a minimum of 4 times a month.

About the role:

Join the Business Transformation team in the Specialist, Technology Risk position. You will be accountable for appropriate application of information technology general controls in the production environment through CMHC's standard processes and frameworks, ensuring compliance to policies, directives, and regulatory guidelines. You will also be responsible for working with suppliers and stakeholders to drive effective representation, engagement, response, and action plan development, in context of planned audit activities and day to day observations resulting from process outputs, for information technology operations.
What you'll do:

• Build positive relationships and partnerships with internal and external partners, service providers, oversight groups and audit entities, collaborating and sharing intelligence to enhance operational practices.
• Manage implementation and operation of information technology general controls in the production environment including control planning, design, implementation, reporting and completion of related change activities within established timeframes.
• Ensure operational compliance with regulatory guidelines and related controls in the domains of: Change and Release Management, Patch Management, Incident Management, Problem Management, Technology Service Measurement and Monitoring, and Disaster Recovery.
• Monitor day to day operational compliance by IT service providers of established IT directives, procedures, standards, and frameworks to support effective operation of information technology general controls.
• Drive Risk and issue mitigation activities forward through engagement in established working groups, information technology governance committees, and relevant stakeholders, including communicating with senior management as needed, to ensure any potential concerns are addressed in a timely and effective manner.
• Responsible for measurement of established key risk indicators, including developing and facilitating execution of mitigating actions, when risk appetite thresholds are exceeded.

What you should have:

• A bachelor's degree preferably in Computer Science, Management Information Systems, Finance, Business Administration, Commerce, or in a related field.
• A minimum five (5) years of increasing responsibilities and relevant work experience in Risk and/or Audit, including remediation plan implementation.
• A demonstrated experience in assessing and reviewing governance, work processes, controls and/or risk management.
• A demonstrated work experience and skills in providing strategic risk advice, recommendations, guidance, and services to senior management on highly complex operational risks and issues through presentations, reports, and briefings.
• An experience and/or knowledge within one or more of the following risk domains: Audit management, Risk management, Compliance management, Cybersecurity; Cloud technologies; Business continuity management and disaster recovery; Data governance and information management; and Vendor management.
• A knowledge of operational risk management frameworks, vendor risk management, operational policy development and knowledge of internal control concepts and frameworks.
• Strong relationship building skills to coordinate with related operations to effectively plan and collaborate on audits and implement findings.
• Strong oral and written communication skills, including the ability to deliver professional advice or direction or present opinions and recommendations to a variety of audiences (technical and non-technical).

It would also be great if you also had:

• A professional designation in Certified Information Systems Auditor (CISA).
• Release, Control and Validation (RCV) - ITIL® v3 Intermediate Service Capability, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Certified in the Governance of Enterprise IT (CGEIT), Professional Accounting (CPA), Certified Internal Auditor (CIA) or other relevant license, designation, or certificate.
• A demonstrated experience in working for financial institutions or insurance industries.
• Bilingualism (English and French).

Posting closing date: Note, the competition will remain active until filled.

Our commitment to diversity, equity, and inclusion

We're committed to employment equity and encourage women, Indigenous Peoples, persons with disabilities, veterans and persons of all races, ethnicities, religions, abilities, sexual orientations, and gender identities and expressions to apply. We also welcome applications from non-Canadians who are eligible to work in Canada.

CMHC is an inclusive workplace where diversity of thought - and of people - are recognized, valued, and considered essential to achieving our mission.

Learn more about our commitment to diversity and inclusion

What happens after you apply

We know that applying for a new job can be both exciting and daunting, and we appreciate your effort. Learn more about our hiring process. If you are selected for an interview or testing, please advise us if you require an accommodation.

If you applied before and you were not successful don't worry - we're always posting new positions, so don't hesitate to give it another shot. We're excited to see what you bring to the table this time around!