{"id":1011426,"url":"https://alion.io/job/omers-senior-manager-technology-risk-controls","title":"Senior Manager, Technology Risk & Controls","company":{"id":704288,"name":"OMERS","domain":"omers.com","url":"https://alion.io/company/omers","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Sales","role_family":"Sales","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":122000,"max":188000,"currency":"CAD","period":"year","gross":null,"usd_annual":132062},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-09-17T20:17:13Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-16T00:23:10Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":27},"description":"Choose a workplace that empowers your impact.\nJoin a global workplace where employees thrive. One that embraces diversity of thought, expertise and passion. A place where you can personalize your employee journey to be - and deliver - your best.\nWe are a leading global real estate investor, developer and manager. We combine our capital with our capabilities to create real estate that strengthens economiesand communities. By prioritizing people, partnerships and places, we generate meaningful returns for OMERS members, enhance value for our capital partners and create a brighter world for our customers.\nJoin us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work.\nDon’t just work anywhere - come build tomorrow together with us.\nKnow someone at OMERS or Oxford Properties? Great! If you're referred, have them submit your name through Workday first. Then, watch for a unique link in your email to apply.\nRole Summary:\nOxford owns and operates one of the world’s best known real estate portfolios, and the technology inside those buildings is now core operating infrastructure. This role owns the independent assurance program over that technology, ensuring that controls are properly designed, working as intended, and evidenced to a standard Oxford can stand behind.\nThe role reports to the Director, Operational Technology and Cybersecurity, with a direct escalation route to Operational Risk and, if necessary to the relevant risk or audit committee. This is a second line mandate. The operating teams own and run the controls; this role tests them, forms a conclusion and reports it. Assurance conclusions do not require sign off from the function being assessed.\nYou will lead a small assurance team and build a program that is still taking shape. Methodology, standards, cadence and reporting are yours to define, with executive and committee visibility from the start.\nThe role covers a global portfolio of properties across Canada, the United States, the United Kingdom, continental Europe, Singapore and Australia. It carries genuine independence, executive access and committee exposure, and you will build both the program and the team from the ground up.\nYou will be responsible for:\nOwning the assurance program over property technology, covering methodology, risk-based planning, scope, sampling, testing, findings and the annual conclusion, and standing behind that conclusion even when it is unfavorable. \nOwning the internal controls framework as it applies to property technology: control design standards, evidence requirements, testing expectations, and the mapping between the technology control set and Oxford’s wider control obligations. \nRunning the annual evidence and attestation cycle end to end, including planning, evidence standards, testing, exceptions and observations, and the position submitted. \nLeading the risk cycle: identifying findings, evaluating the controls behind them, recommending solutions, validating remediation, performing root cause analysis on control failures, and facilitating residual risk acceptance where remediation is not pursued. \nDelivering technology assurance on transactions: by assessing the technology and control position of assets entering the portfolio, assuring a secure and evidenced exit for those leaving it, and risk assessing significant technology initiatives before they reach the estate. \nOwning the incident readiness exercise program, including scenario design, delivery, evaluation and carry forward actions, with scenarios drawn from the real incident and near miss record. \nBuilding the metrics that surface control weakness, including control environment health, exception trends and remediation ageing, read against risk appetite, alongside recurring second line monitoring such as restricted access review. \nReporting to executives and committee, translating control and risk findings into business terms leaders can act on, and acting as the coordination point for internal and external audits. \nPartnering across the three lines of accountability, the Business of accountability, the Business, Compliance, Enterprise Operational Risk and Internal Audit, so the approach to technology risk stays consistent, and leading, coaching and developing the assurance team. \nOwn decision authority to set the assurance methodology, scope, sampling approach and testing standard, and decide what counts as sufficient evidence for a control. You also determine control ratings and findings, the attestation position submitted, exercise scope and evaluation criteria, the assurance requirements applied to acquisitions and dispositions, and the priorities of the program. \nRequired Skills & Experience\n8+ years in assurance, internal controls or audit practice, including methodology design, sampling and evidence testing. \nDemonstrated experience designing control frameworks and mapping them to enterprise risk and regulatory obligations, with working knowledge of recognized frameworks such as COBIT, ISO 27001 and the NIST Cybersecurity Framework. \nExperience running the full risk cycle: assessment, control evaluation, remediation validation and residual risk acceptance. \nEnough technical depth across network, platform, security and application domains to test technology controls directly rather than rely on what is asserted. \nProven executive and committee-level reporting, with the ability to put technology and audit findings in business terms. \nPeople leadership experience, including coaching and performance management. \nThe professional judgement and credibility to hold an independent position within the structure you assess, and to escalate when it is warranted. \nPreferred Skills & Experience\nA professional designation such as CPA, CIA, CISA, CISSP or equivalent. \nExperience developing control metrics and measurement where none existed before. \nExposure to real estate, infrastructure or other multi-site operating environments, or to building technology and operational technology estates. \nExperience assuring technology in a multi-jurisdictional portfolio. \nBachelor’s degree or equivalent experience. \nWe believe that time together in the office is important for OMERS and Oxford, the strength of our employees, and the work we do for our pension members. In delivering on our pension promise, keeping us connected to our work and each other, our flexible hybrid work guideline requires teams to come in to the office 4 days per week.\nThis posting is for an existing vacancy.The expected salary range for this position is $122,000.00 - $188,000.00 per year.You may also be eligible to receive an annual Incentive Award pursuant to our Short-term Incentive plan and our Long-Term Incentive plan (if applicable), and to participate in our group benefits and retirement plans - details on these elements of compensation are included within OMERS & Oxford offer letters.\nOxford's purpose is to strengthen economies and communities through real estate.\nOur people-first culture is at its best when our workforce reflects the communities where we live and work - and the customers we proudly serve.\nFrom hire to retire, we are an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our Purpose@Work committee and employee recognition programs.\nArtificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision-making remain central to our candidate experience.","description_format":"text","description_chars":7841,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Retirement plans"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Venture Capital","PropTech"],"lifecycle":[{"event":"open","at":"2026-09-17T20:17:13Z"},{"event":"close","at":"2026-09-18T20:16:59Z"},{"event":"reopen","at":"2026-09-22T19:06:44Z"}],"visa":[],"liveness":{"score":38,"band":"fade","label":"Fading","p_open":1,"p_active":0.688,"p_room":0.55,"age_days":27,"expected_fill_days":26,"reasons":["conf:18","win:tail"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":132062,"is_top_pay":false},"html_url":"https://alion.io/job/omers-senior-manager-technology-risk-controls","json_url":"https://alion.io/job/omers-senior-manager-technology-risk-controls.json","meta":{"generated_at":"2026-10-16T01:57:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3187,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":704288},"rest":"https://alion.io/mcp/rest/get_company?id=704288"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fomers-senior-manager-technology-risk-controls"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fomers-senior-manager-technology-risk-controls"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fomers-senior-manager-technology-risk-controls"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/omers-senior-manager-technology-risk-controls\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fomers-senior-manager-technology-risk-controls"}]}