Technology Risk & Governance Lead – Banking Transformation

The role

The Technology Risk & Governance Lead will manage technology risk and governance across five ETAM workstreams for a Tier 1 Canadian financial institution. This role involves overseeing control design, testing, and regulatory remediation while partnering with senior stakeholders and technical teams.

What you will do

• Take ownership of technology risk and governance activities across five ETAM workstreams.
• Oversee control design, testing, risk and control self-assessments, audit evidence management, and regulatory remediation activities.
• Partner with solution architects, information security specialists, and technology delivery teams to align solutions with security standards and risk policies.
• Establish effective governance reporting, risk escalation, issue management, and remediation tracking.
• Work with technology leaders, risk and compliance teams, and delivery partners to embed governance practices.

Required qualifications

• 8–12+ years of overall professional experience.
• Minimum of 5 years in technology risk management, Governance, Risk & Compliance (GRC), or regulatory compliance.
• Minimum of 3 years of experience supporting large financial institutions.
• Strong understanding of banking technology risk, operational risk, first-line technology controls, and Canadian financial services regulatory expectations.
• Demonstrated experience in technology risk assessments, control design and testing, risk and control self-assessments, audit evidence management, issue remediation, and regulatory compliance.
• Strong understanding of information security standards, enterprise technology governance, technology asset lifecycle risks, and regulatory remediation.
• Experience collaborating with solution architects and technology delivery teams.
• Excellent analytical thinking, sound judgement, attention to detail, and communication skills.

Nice to have

• Previous experience supporting technology risk and governance initiatives within Tier 1 Canadian financial institutions, including enterprise technology asset management and asset lifecycle governance
• Experience implementing or working with ServiceNow Integrated Risk Management (IRM), Archer, or similar enterprise GRC platforms.
• Exposure to control automation, continuous control monitoring, data-quality governance, technology asset risk management, or AI governance.
• Experience supporting internal or external audits, regulatory examinations, remediation programs, or third-party technology risk assessments.
• A bachelor's degree in Business, Finance, Accounting, Information Systems, Cybersecurity, or a related discipline.
• Postgraduate qualification in Risk Management or Information Security.
• Professional certifications such as CISA, CRISC, or CISM.
• COBIT Foundation, CGEIT, ITIL 4 Foundation, or ISO 27001 Lead Auditor.

Benefits

• 100% company-paid health, life, and disability insurance effective from Day 1.
• Registered Retirement Savings Plan (RRSP) with option for matching employer contribution.
• Company-paid Virtual Health Care for employees and dependents/partners.
• Company-paid Employee & Family Assistance Program (EFAP) for employees and dependents/partners.
• Enhanced parental leave benefits available from Day 1.
• Company-sponsored new parent gift.
• Fitness reimbursement benefit.
• Personalized one-on-one business coaching from Day 1.

About the company

Capco is a consulting firm with a collaborative, flat, and entrepreneurial culture. They deliver technology solutions for Tier 1 financial institutions and shape digital transformation across FS & Energy.