IT Security Specialist V – IT Risk & GRC

Location: Toronto or Mississauga, ON – Hybrid

Duration: 6 Months

Industry: Banking / Financial Services

About the Role

- We are seeking a senior IT Risk / GRC professional to support Technology Risk, Governance, Audit, Regulatory, and Information Security initiatives within a regulated financial-services environment. This is an individual contributor role focused on audit/regulatory issue remediation, control oversight, risk assessment, and independent challenge.

Key Responsibilities

- Lead assessment and validation of audit and regulatory findings and remediation plans.
- Provide independent challenge and oversight of IT Risk, GRC, and Information Security controls.
- Evaluate remediation evidence, perform control testing and operating effectiveness assessments, and support issue closure.
- Conduct root cause analysis, risk assessments, and control design reviews.
- Partner with Technology, Risk, Audit, Compliance, and senior stakeholders across the **Three Lines of Defense
- Identify emerging technology risk themes and provide governance and risk insights to management.
- Support continuous improvement initiatives using Agile/Lean, Power BI/Apps, Python, AI/ML, or other automation tools where applicable.
- Prepare clear, concise risk, governance,



audit, and management reporting.

Must-Have Skills

* 10+ years of IT Risk, Technology Risk, IT Audit, or GRC experience.

- Strong experience within banking, financial services, or other regulated industries.
- Robust knowledge of IT Governance, Risk & Compliance (GRC) frameworks.
- Hands-on experience with audit/regulatory finding remediation and validation.
- Strong understanding of audit testing, evidence evaluation, control testing, and operating effectiveness.
- Experience with root cause analysis and issue management.
- Excellent written and verbal communication skills.
- Strong attention to detail and ability to manage multiple stakeholders and priorities.
- University degree or equivalent relevant experience.

- Certification Required/Preferred:**

- * CRISC / CISM / CISA or equivalent experience

Nice to Have:

- CISSP
- CIA
- Six Sigma
- ServiceNow / ServiceNow GRC or IRM
- AI Security / AI Risk experience

Why This Role?

- Join a highly collaborative Technology Risk and Security environment where you will work closely with Technology, Risk, Audit, Compliance, and senior leadership to strengthen governance, controls, and risk-management practices.

📌 Information Technology Security Specialist (Toronto)
🏢 Tundra Technical Solutions
📍 Toronto