Senior Consultant, Risk & Compliance The world is changing with AI. Are you ready to accelerate your career with us? We are looking for a motivated Senior Consultant, Risk & Compliance to join our consulting team. You will support clients across financial services, public sector, technology, and other industries in addressing practical business, technology, risk, governance, and compliance challenges.

What You Will Be Doing

- Assist with managing AI Governance and Transformation programs including policy development, AI use case analysis, risk assessments, control considerations, and oversight activities aligned with responsible AI principles and emerging frameworks.
- Support the planning and delivery of IT risk, compliance, internal audit, control testing, and governance engagements under the guidance of experienced team members.
- Participate in IT risk assessments, IT process reviews, internal audits, compliance gap assessments, and readiness reviews for systems, processes, vendors, and business initiatives.
- Assess the design and operating effectiveness of IT general controls (ITGCs), including access management, change management, computer operations, backup and recovery, and related technology controls.
- Support the review and testing of IT-dependent and business process controls across operational and financial processes, including control walkthroughs, evidence review, test documentation, and identification of control gaps.
- Help identify, assess, prioritize, and communicate technology and compliance risks, and develop practical, business-aligned observations and recommendations.
- Support the design, implementation, and improvement of governance frameworks,



policies, procedures, risk registers, control matrices, and remediation plans.
- Prepare clear workpapers, reports, executive summaries, presentations, process narratives, risk and control matrices, and remediation trackers.
- Lead and participate in client interviews, walkthroughs, workshops, and stakeholder discussions with technical, operational, and business teams.
- Liaise with external auditors, certification bodies, control owners, and other stakeholders to support audit, compliance, and certification activities.
- Maintain current knowledge of IT risk, cybersecurity, information security, privacy, AI governance, industry trends, and relevant standards and frameworks.

What We Are Looking For

- Upto 3 years of relevant experience in IT risk, IT audit, controls assurance, cybersecurity, governance, compliance, risk advisory, consulting, or a related field. Relevant co-op, internship, and project experience may be considered.
- Exposure to IT risk management and governance concepts, with an interest in helping organizations establish practical, risk-based programs and controls.
- Exposure to AI-related risks or AI governance is preferred, including AI use-case assessments, responsible AI principles, policies, oversight,



or frameworks such as ISO/IEC 42001 and the NIST AI Risk Management Framework.
- Foundational knowledge or practical exposure to ITGCs and IT business process controls, including control design, walkthroughs, documentation, implementation, or testing.
- Ability to understand traditional controls and provide practical advice on control objectives, control design, evidence, gaps, and remediation actions.
- Knowledge of one or more recognized frameworks or standards, such as ISO 27001, SOC 1/SOC 2, SOX ITGC, COSO, COBIT, NIST CSF, NIST SP 800-53, ICFR.
- Strong analytical, problem-solving, research, and documentation skills, with attention to detail and a willingness to learn.
- Clear written and verbal communication skills, with the ability to collaborate effectively with internal teams and client stakeholders.
- Bachelor’s degree or diploma in business, accounting, information systems, technology, cybersecurity, risk management, or a related discipline.
- Relevant professional certifications preferred such as CISSP, CISA, ISO 27001 Lead Auditor or Lead Implementer, or ISO 42001.
- Previous experience with a Big Four firm or another recognized consulting organization is considered a strong asset.

Why Join Us

- Competitive Compensation and Comprehensive Benefits
- Adaptable Work Arrangements that support work–life balance
- Opportunities for Career Advancement
- Semi-casual Work Attire
- Collaborative, Dynamic, and Fast-growing Team Environment
- Continuous Learning and Skill Development Opportunities
- Regular Team Events
- Convenient office location near the SkyTrain station

📌 Senior Consultant, Risk & Compliance (Richmond)
🏢 Cyberium Group
📍 Richmond