Build and maintain Optiom's CMDB — applications, infrastructure, integrations, data flows Consolidate every technology vendor agreement into a single register, and flag gaps, expiries, and duplicate spend Run business impact assessments and rate every application for criticality Set recovery targets and hold the environment to them Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application Keep security policies and control documentation current Answer due diligence questionnaires from broker, dealer, and OEM partners using a governed source Build governance artifacts as a hands-on individual contributor Work with Vendor Management business analysts and own the outcome Requirements

3–6 years in IT governance, risk, compliance, service management, or IT security in an operational role Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register Experience authoring business continuity, disaster recovery, or incident response documentation — not just reviewing plans someone else wrote Working knowledge of a recognized framework (NIST CSF, ISO 27001, ISO 22301, COBIT, or ITIL) Comfort reading commercial contracts and pulling out the terms that actually matter — notice periods, termination rights, SLAs Documentation discipline and persistence to chase down owners until you get an answer Post-secondary education in IT, business, or a related field — or equivalent experience Bonus: ITIL Foundation, CompTIA Security+, CRISC, CISA, CISM,



or a DRI International certification (ABCP/CBCP) Bonus: Experience in insurance, financial services, or another regulated industry Bonus: Familiarity with Microsoft 365, Entra ID, and Defender Bonus: Experience with ServiceNow, Jira, or Confluence Bonus: Exposure to SaaS, MGA, or carrier platform environments Core Competencies

Demonstrates expertise in IT governance, risk management, and compliance, with a robust focus on building and maintaining a Configuration Management Database (CMDB) and authoring critical documentation for business continuity and disaster recovery. Proficient in vendor management and contract analysis within regulated industries. Highest-signal resume keywords

IT Governance Configuration Management Database (CMDB) Development Business Continuity Planning Disaster Recovery Documentation Risk Management Frameworks (NIST CSF, ISO 27001) ATS Optimization Keywords

Hard Skills

IT Governance Risk Management Compliance Service Management Business Continuity Planning Disaster Recovery Planning Incident Response Documentation Configuration Management Database (CMDB) Contract Analysis Documentation Discipline Soft Skills

Persistence Attention to Detail Communication Certifications & Qualifications

ITIL Foundation CompTIA Security+ CRISC CISA CISM DRI International Certification (ABCP/CBCP) Industry Keywords

Insurance Financial Services Regulated Industry SaaS MGA Carrier Platform Tools & Technologies

Microsoft 365 ServiceNow Jira Confluence Entra ID Defender

#J-18808-Ljbffr

📌 IT Security Analyst – Resilience (Winnipeg)
🏢 Jobtailor
📍 Winnipeg