Senior Information Security Specialist – IT Risk, GRC & AI Transformation

Senior Information Security Specialist – IT Risk, GRC & AI Transformation- Job - 37819

Location: Toronto or Mississauga, ON
Work Arrangement: Hybrid – Currently 2 days onsite, transitioning to 4 days
Contract Duration: 6 months (extension and conversion possible)
Pay Rate: $90–$110/hour
Schedule: Monday–Friday, 9 AM–5 PM

About the Opportunity

We are looking for a highly experienced Senior Information Security Specialist with a strong background in IT Risk, Governance, Risk & Compliance (GRC), audit remediation, and technology controls.

This role focuses on independent assurance, regulatory remediation oversight, and leveraging AI to transform audit and quality assurance processes within a large, regulated financial services environment.

Key Responsibilities

• Lead independent risk-based reviews of audit and regulatory remediation plans, milestones, and supporting evidence.

• Conduct sample-based testing using Inspection, Observation, and Reperformance (IOR) methodologies.

• Evaluate control design, implementation, operating effectiveness, and sustainability.

• Assess remediation plans for completeness, risk alignment, evidence sufficiency, and regulatory readiness.

• Provide guidance on IT risk governance, audit standards, and GRC frameworks.

• Lead the design and implementation of AI-enabled solutions to support remediation quality assurance and risk assessments.

• Translate QA frameworks, scoring criteria, and regulatory requirements into AI-driven evaluation workflows.

• Collaborate with Technology, Information Security, Internal Audit, Model Risk, Privacy, and Legal teams.

Must-Have Qualifications

• 10+ years of experience in IT Risk, Governance, Risk & Compliance within regulated industries.

• Strong background in IT Audit, Information Security, technology controls, and regulatory remediation.

• Hands-on experience with audit testing, evidence evaluation, remediation validation, root cause analysis, and control effectiveness assessments.

• Experience applying IOR methodologies or comparable audit validation techniques.

• Experience designing or implementing AI-enabled assurance or QA solutions, including evaluation workflows, prompts, and risk assessment capabilities.

• Strong understanding of IT governance and control frameworks such as NIST, COBIT, and ITIL.

• Exceptional written and verbal communication skills, with strong documentation capabilities.

• Experience working with senior stakeholders and across multiple lines of defense.

Preferred Qualifications

• CISA, CRISC, CISM, CIA, CISSP, or equivalent experience.

• Experience within banking or regulated financial services.

• AI security, AI governance, or AI risk management experience.

• Familiarity with ServiceNow, RSA Archer, JIRA, and Confluence.

• Six Sigma or continuous improvement experience.

• Knowledge of Agile methodologies.

Interested?

If you have a strong combination of IT Risk, Audit Remediation, GRC, and AI Transformation experience, we would love to hear from you.

Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.