Senior Information Security Specialist – IT Risk, GRC & AI Transformation- Job - 37819
Location: Toronto or Mississauga, ON
Work Arrangement: Hybrid – Currently 2 days onsite, transitioning to 4 days
Contract Duration: 6 months (extension and conversion possible)
Pay Rate: $90–$110/hour
Schedule: Monday–Friday, 9 AM–5 PM
About the Opportunity
We are looking for a highly experienced Senior Information Security Specialist with a strong background in IT Risk, Governance, Risk & Compliance (GRC), audit remediation, and technology controls.
This role focuses on independent assurance, regulatory remediation oversight, and leveraging AI to transform audit and quality assurance processes within a large, regulated financial services environment.
Key Responsibilities
-
Lead independent risk-based reviews of audit and regulatory remediation plans, milestones, and supporting evidence.
-
Conduct sample-based testing using Inspection, Observation, and Reperformance (IOR) methodologies.
-
Evaluate control design, implementation, operating effectiveness, and sustainability.
-
Assess remediation plans for completeness, risk alignment, evidence sufficiency, and regulatory readiness.
-
Provide guidance on IT risk governance, audit standards, and GRC frameworks.
-
Lead the design and implementation of AI-enabled solutions to support remediation quality assurance and risk assessments.
-
Translate QA frameworks, scoring criteria, and regulatory requirements into AI-driven evaluation workflows.
-
Collaborate with Technology, Information Security, Internal Audit, Model Risk, Privacy, and Legal teams.
Must-Have Qualifications
-
10+ years of experience in IT Risk, Governance, Risk & Compliance within regulated industries.
-
Strong background in IT Audit, Information Security, technology controls, and regulatory remediation.
-
Hands-on experience with audit testing, evidence evaluation, remediation validation, root cause analysis, and control effectiveness assessments.
-
Experience applying IOR methodologies or comparable audit validation techniques.
-
Experience designing or implementing AI-enabled assurance or QA solutions, including evaluation workflows, prompts, and risk assessment capabilities.
-
Strong understanding of IT governance and control frameworks such as NIST, COBIT, and ITIL.
-
Exceptional written and verbal communication skills, with strong documentation capabilities.
-
Experience working with senior stakeholders and across multiple lines of defense.
Preferred Qualifications
-
CISA, CRISC, CISM, CIA, CISSP, or equivalent experience.
-
Experience within banking or regulated financial services.
-
AI security, AI governance, or AI risk management experience.
-
Familiarity with ServiceNow, RSA Archer, JIRA, and Confluence.
-
Six Sigma or continuous improvement experience.
-
Knowledge of Agile methodologies.
Interested?
If you have a strong combination of IT Risk, Audit Remediation, GRC, and AI Transformation experience, we would love to hear from you.
Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.
