Senior Associate, Risk – Technology Services Group

Optimus SBR

Join Optimus SBR as an Associate/Senior Associate in Technology Services Group. Focus on technology risk advisory and delivery with a collaborative, high-performing team in consulting.

Posted 7/22/2026full-timeToronto • 🇨🇦 CanadaSenior💰 CA$100,000 - CA$130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in technology risk management, IT audit, and cybersecurity, with a strong focus on control design and effectiveness. Proficient in applying recognized frameworks and conducting regulatory assessments while leading cross-functional teams and mentoring junior staff.

Highest-signal resume keywords

Technology Risk ManagementIT AuditCybersecurityControl TestingRegulatory Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Control DesignControl EffectivenessRisk AssessmentPolicy ReviewFramework KnowledgeControl RationalizationRegulatory MappingProcedure DevelopmentAutomation OpportunitiesClient Engagement

Soft Skills

Analytical SkillsProject ManagementCommunication SkillsTeam LeadershipCoaching and Mentoring

Tools & Technologies

GRC ToolsAnalytics ToolsAutomation Tools

Certifications & Qualifications

CPACRISCCISSPCISACISM

Industry Keywords

COSOCOBITNIST CSFISO 27001SOC ReportingSOX Reporting1LoD2LoDCanadian RegulatorsUS Regulators

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support project scoping, approach design, work planning, team structure, and effort and timeline estimation.
Deliver technology risk and advisory engagements within agreed scope, timelines, budgets, and quality expectations.
Facilitate client meetings and develop clear reports, presentations, recommendations, and other deliverables.
Identify, manage, and escalate project risks, issues, dependencies, and resource constraints.
Support a range of technology risk, cybersecurity, regulatory, governance, and controls advisory engagements.
Identify and assess technology risks and evaluate the effectiveness of associated governance, processes, and controls.
Apply recognized risk and control frameworks to assess client environments and develop practical recommendations.
Review policies, standards, procedures, risk assessments, and control documentation for completeness, consistency, and alignment.
Support regulatory and industry-standard assessments, including evaluating whether relevant risks and requirements are appropriately addressed.
Identify opportunities to strengthen, standardize, rationalize, or automate risk and control activities.
Demonstrate an understanding of control design and operating effectiveness, including control objectives, testing approaches, evidence requirements, and documentation of conclusions.
Support control assessment and testing activities across IT general controls, application controls, business controls, and technology-dependent controls.
Provide day-to-day direction, coaching, and mentoring of junior team members.
Lead cross-functional teams and drive security initiatives to completion.
Contribute to business development, client delivery, and practice growth.
Support employee growth through Optimus SBR’s Career Development Program (CDP).

Requirements

What you’ll need

6+ years of experience in technology risk, IT audit, cybersecurity, control testing, regulatory compliance, or advisory consulting.
Strong understanding of IT and business controls, including experience assessing control design or operating effectiveness.
Experience reviewing policies, procedures, risks, and controls and identifying gaps or standardization opportunities.
Knowledge of frameworks such as COSO, COBIT, NIST CSF, or ISO 27001.
Strong analytical, project-management, communication, and client-engagement skills.
Ability to coordinate workstreams and provide direction and quality review to junior resources.
University degree in business, accounting, technology, cybersecurity, or a related discipline.
Certifications: CPA, CRISC, CISSP, CISA, CISM (Nice to Have)
Understanding of Canadian and US regulators (OSFI, OCC, FRB) (Nice to Have)
Experience with SOC and SOX reporting (Nice to Have)
Previous experience in a 1LoD or 2LoD role (Nice to Have)
Experience with control rationalization, regulatory mapping, procedure development, or identifying automation opportunities (Nice to Have)
Familiarity with GRC, analytics, and automation tools (Nice to Have)
Big 4 or consulting firm background (Nice to Have)

Benefits

Comp & perks

Annual Bonus
Retirement savings through our Group RRSP program
Company equity for Managers and above
Maternity and Parental Leave with top up compensation
Work in a Hybrid model (when client projects permit)
12 Optimus Days paid
Top-tier health benefits
Life & disability insurance
Health Spending Dollars