IT Risk and Control Analyst

Job title: IT Risk and Control Analyst

Job description: Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

We are looking for a resourceful and positive IT Risk and Control Analyst to be part of our IT Risk team. You will support risk monitoring and reporting in accordance with risk management practices to CIO, AVP Risk and Compliance, and Sr. Manager IT Risk.

We are a collaborative team and are looking for someone who is an outstanding teammate and problem solver. You are comfortable in a creative and fast-paced environment.

What you’ll do

Nature of Work

• Support the CISO organization from a Risk and Controls perspective with Information Security risks, IT controls and issues proficiently.
• Supports the functional leadership team to manage IT risks and controls:
• Drive robust risk management through control and issue analysis
• Advise, consult and mentor/coach partners with the identification and assessment of risks
• Promote security awareness and culture efficiently
• Coordinate and manage IT Risk reports at various Local and Group levels.
• Report and escalate on the status of the relevant risks and controls through established processes.

Risks & Controls

• Provide analysis and recommendations for appropriate strategic decisions and actions to maintain acceptable risk exposure.
• Report and escalate the status of the relevant risks, controls and standards as appropriate.
• Supervise progress of sophisticated issues and actions to ensure remediation timelines are met efficiently.
• Partners with key partners to build and implement remediation plans where required.
• Provide support in various Risk Assessments (inherent and residual, root cause analysis, RCSAs, Risk Events, Risk Exceptions).
• Produce regular risk reporting for Aviva Canada and Aviva Group IT. This includes risk monitoring, co-ordinating input and updates, analysis and reviews of reports.
• Maintain appropriate records on iCARE or Archer (IT Risk and Compliance tools).
• Support a strong and continuously improving Risk & Control environment across IT.
• Maintains knowledge of industry trends, developments, and regulatory changes to support IT and Aviva Canada.
• Work closely with IT and Risk partners to improve risk management practices. This includes drafting, developing, and documenting IT Risk processes and procedures, and supporting the tools used by IT Risk (e.g. iCare and Archer).

Internal Collaboration

• Day to day engagement with a range of local control owners and nominees involved in all aspects of Risk Management to ensure proactive and timely Risk mitigation.
• Engagement with Risk and Governance teams and Business Leadership across business units (globally and in Canada) to identify and implement Best Practices and Standards.

External Collaboration

• Outstanding ability to foster and build good working relationships with areas inside and outside the business unit.

What you’ll bring

• 3+ years of combined experience in audit, IT risk and compliance and Information Security (preferably within the financial industry).
• Bachelor’s degree in Computer Science or Computer Engineering.
• Strong communication and interpersonal skills.
• Strong analytical and problem solving skills.
• Proficiency and resourcefulness in identifying and analyzing relevant information to identify critical issues and alternatives.
• Understanding of the CIO business, strategy and plans.
• Ability to prioritize and deliver multiple activities concurrently.
• Self-starter who is able to operate independently, part of a large matrix network and as a team member.
• Preference will be given to candidates with a solid understanding in the areas of Cyber Security.
• Knowledge of other insurance functional areas is an asset.
• Ability and desire to inspire change in a sophisticated environment.
• Proven dedication to high standards of performance.
• Commitment to ongoing professional and technical development.
• Preference will be given to candidates with CISA, CISM, CRISC, and/or CISSP designations.

What you’ll get

• Competitive rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
• Exceptional Career Development opportunities.
• We’ll support your professional development education.

Additional Information: Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.

Click Here to Apply

Source: