Information Security Specialist

Our financial services client is seeking a Information Security Specialist (10+ years) to lead AI-enabled assurance transformation using IOR methodology and GRC frameworks

Join a high-impact governance, risk, and compliance function within a regulated banking environment backfilling a critical role. This position drives independent remediation assurance across audit and regulatory findings, leveraging IOR, QA reviews, and AI-enabled assurance transformation. Expect broad exposure across technology domains and cross-functional networks, with opportunities to advance AI-aligned skill sets.

Contract, Toronto or Mississauga, Hybrid, currently 2 days but will be going in 4 days eventually!

• 310/320 Front Street West Corporate, Toronto, Ontario
• Or Mississauga 4880 Tahoe blvd 

Must Haves

• 10+ years as an IT Risk Specialist within governance, risk and compliance in regulated industries
• CRISC, CISA, or CISM (or equivalent experience) with assurance, validation or QA of audit/regulatory findings
• Audit testing techniques, evidence evaluation, issue remediation validation, root cause analysis, and control operating effectiveness assessment (including IOR)
• AI-enabled assurance design and implementation for challenge and QA reviews
• University degree or relevant field / equivalent experience

Nice to Have

• Six Sigma
• CISSP certification or equivalent experience
• AI security/risk experience/tools
• Service-now

Responsibilities

• Conduct sample-based testing using IOR to validate control design, implementation, operating effectiveness, and sustainability
• Perform quality assurance to assess whether remediation plans are complete, risk-aligned, and validation-ready
• Lead independent, risk-focused reviews to confirm action plans, milestones, and resolutions are credible and evidenced
• Provide advice and guidance to Technology segments and Technology Risk Services on Audit & Assurance Standards, IT Risk Governance Control Frameworks, and GRC frameworks
• Contribute to Governance Oversight & Control practice maturity by improving Risk Identification, Control Design, and Operating Effectiveness
• Lead the design and implementation of an AI-enabled capability to support challenge and QA reviews of remediation plans, milestones, and evidence
• Ensure AI solutions comply with information security, privacy, data protection, and model risk standards in partnership with Legal, Privacy, Model Risk, and Technology teams