Senior IT Risk & GRC Specialist

Duration: 6-month contract

Location: Toronto / Mississauga, ON

Work Model: Hybrid, currently 2 days onsite with expectation to increase to 4 days

Hours: Monday to Friday, 9:00 AM–5:00 PM

Extension/Conversion: Possible

Role Overview

Our client is seeking a Senior IT Risk & GRC Specialist to provide governance, risk, compliance and issue remediation oversight within a large, regulated technology workplace. This individual will work closely with technology, risk and audit stakeholders to assess remediation activities, validate controls and support effective risk mitigation.

Key Responsibilities
Lead assessments and validation of audit and regulatory finding remediation
Evaluate evidence, remediation plans and control operating effectiveness
Provide guidance on IT risk, governance, audit and GRC frameworks
Perform independent challenge and oversight of technology risk issues
Identify risk themes and trends and provide insights to senior stakeholders
Support continuous improvement initiatives across governance and control practices
Contribute to technology-enabled improvements leveraging tools such as AI, Power BI/Apps and Python





Must-Have Qualifications
10+ years of IT Risk, GRC, IT Audit or Technology Controls experience , ideally within regulated industries
Solid experience with audit/regulatory findings, remediation validation and assurance reviews
Strong knowledge of audit testing, evidence evaluation, root cause analysis and control effectiveness
Experience with IT risk governance and GRC frameworks
Exceptional written and verbal communication skills
Professional certification or equivalent experience such as CISA, CRISC, CISM or CIA

Nice to Have
CISSP
AI security/risk experience
ServiceNow
Lean Six Sigma / continuous improvement experience

Ideal Profile: A senior IT Risk/GRC professional with a robust IT Audit foundation who can independently assess remediation work, challenge stakeholders effectively and communicate confidently across technology, risk and audit teams. Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.

📌 Senior It Risk & Grc Specialist Toronto
🏢 Infotek Consulting
📍 Toronto