Senior IT Risk & GRC Specialist

Duration: 6-month contract

Location: Toronto / Mississauga, ON

Work Model: Hybrid, currently 2 days onsite with expectation to increase to 4 days

Hours: Monday to Friday, 9:00 AM–5:00 PM

Extension/Conversion: Possible

Role Overview

Our client is seeking a Senior IT Risk & GRC Specialist to provide governance, risk, compliance and issue remediation oversight within a large, regulated technology environment. This individual will work closely with technology, risk and audit stakeholders to assess remediation activities, validate controls and support effective risk mitigation.

Key Responsibilities

- Lead assessments and validation of audit and regulatory finding remediation
- Evaluate evidence, remediation plans and control operating effectiveness
- Provide guidance on IT risk, governance, audit and GRC frameworks
- Perform independent challenge and oversight of technology risk issues
- Identify risk themes and trends and provide insights to senior stakeholders
- Support continuous improvement initiatives across governance and control practices
- Contribute to technology-enabled improvements leveraging tools such as AI, Power BI/Apps and Python





Must-Have Qualifications
- 10+ years of IT Risk, GRC, IT Audit or Technology Controls experience, ideally within regulated industries
- Strong experience with audit/regulatory findings, remediation validation and assurance reviews
- Strong knowledge of audit testing, evidence evaluation, root cause analysis and control effectiveness
- Experience with IT risk governance and GRC frameworks
- Exceptional written and verbal communication skills
- Qualified certification or equivalent experience such as CISA, CRISC, CISM or CIA

Nice to Have
- CISSP
- AI security/risk experience
- ServiceNow
- Lean Six Sigma / continuous improvement experience

Ideal Profile: A senior IT Risk/GRC professional with a strong IT Audit foundation who can independently assess remediation work, challenge stakeholders effectively and communicate confidently across technology, risk and audit teams. Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.

📌 Senior IT Risk & GRC Specialist (Toronto)
🏢 Infotek Consulting
📍 Toronto