Job DescriptionJob DescriptionSecurity Specialist

Location: Toronto, ON

Onsite Flexibility: Hybrid 2 days on-site, 3 days work from home (potential to go to 5 days per week)

Contract Details

- Position Type: Contract
- Contract Duration: 12 months (extension possible based on business needs and performance; conversion to permanent possible based on business needs and performance)
- Pay Rate: C$90.00 C$108.00 / Hour (CAD)
- Shift / Schedule: Monday Friday, core business hours 37.5 hours per week, 7.5 hours per day
- Travel Requirements: Not required

Job Summary

This role supports two concurrent projects within a Technology Controls Governance and Reporting function, building out governance and oversight capabilities for technology issues across the issue management lifecycle including regulatory issues, first/second/third line of defense matters, audit compliance issues, data analytics, and automation. The team governs the technology issue-management lifecycle, sitting above the remediation function: they do not perform the remediation or control testing themselves, but rather oversee the process. The team manages governance focused on technology issues and technology controls, governing the process to ensure it stays on track, escalating up or down as required. Project 1 involves governance, monitoring, and tracking of regulatory exam findings. Project 2 involves governance and oversight of the technology issues management program. The team is nine people and interacts with various other teams and senior executives. Performance is measured by hitting timelines and quality of work. Day-to-day work involves three to four hours in meetings to collect status and collaborate, followed by two to three hours performing governance activities, providing updates, and creating reports with frequent ad hoc requests from executives who may require candidates to retrieve and summarize status rapidly. There can be frequent "fire drills" because the GRC process is still being matured. The team uses ServiceNow AGRC module, PowerBI for reporting, SharePoint, Confluence, Excel (Macros), and Access.

Key Responsibilities

- Govern the technology issue-management lifecycle
- Track issues and findings through remediation
- Monitor deadlines, milestones, and progress
- Identify and escalate blockers
- Provide executive visibility and reporting
- Prepare initial drafts and templates for regulatory communications




- Ensure issues stay on track through governance
- Think of issues as tickets requiring remediation, while this team oversees the process rather than doing the technical fix
- Understand the lifecycle process of issue remediation and technology controls remediation
- Analyze data and produce governance reporting
- Draft communications to regulators (will not be communicating directly with regulators)
- Understand what a control is, what an issue is, industry standards, and toll gates
- Apply good organizational and program management skills to stay on top of issues and timelines

Required Experience

- 10 years of experience in regulatory exam findings, internal audits, technology issues management, or technology GRC preferred, but flexible if the candidate has strong relevant experience
- Strong transferable backgrounds include: Internal Audit, Technology Risk Management, GRC, control testing or control-testing oversight and review, control design, issue management and remediation governance, first/second/third line of defense, Big 4 consulting, technology governance, or strong project/program management experience
- Banking experience is NOT mandatory skills are considered transferable across industries

Nice-to-Have Experience

- Governance, Risk and Controls experience
- Big 4 consulting firm experience
- Experience with Alteryx, Power BI, Tableau, or any other automation tools for reporting

Must-Have Requirements

- 10 years of regulatory exams and findings, internal audits, technology issues management, or tech GRC experience
- Microsoft Suite PP, Word, Excel, Visio
- Previous control testing and audit experience
- Ability to write reporting intended for executive level

Required Skills

- Ability to work independently and collaborate in a team environment
- Strong communication skills verbal and written, with the ability to engage effectively with senior stakeholders and executives
- Strong critical thinking skills
- Strong attention to detail, proactive, and organized




- Ability to understand the lifecycle process of issue remediation and technology controls remediation
- Ability to retrieve and summarize status rapidly in response to ad hoc executive requests
- Good organizational and program management skills

Preferred Skills

- CISA and CRISC certifications or equivalent (strongly preferred for the issues management project)
- CISA/CISSP-type certifications can be beneficial, but strong relevant experience can compensate certification is not the primary selection factor

Education Requirements

- Post-secondary education required
- Certifications are an asset
- CISA and CRISC certifications or equivalent strongly preferred for the issues management project

Work Environment / Physical Requirements

- Hybrid work model: 2 days in office, 3 days work from home (potential to go to 5 days per week on-site)
- Anchor days follow the team's schedule
- Approximately 3 4 hours per day in meetings (status collection, collaboration)
- Frequent ad hoc requests from executives requiring rapid data retrieval and reporting
- Overtime: possibility
- No rotation

About the Client

This client is one of North America's largest financial services institutions and the sixth-largest bank on the continent by branches, headquartered in Toronto, Ontario, and serving approximately 22 million customers across Canada, the United States, Europe, and the Asia-Pacific region over 85,000 employees worldwide. It operates a full-service financial platform spanning personal and commercial banking, wealth management, insurance, and payment solutions. Teams here include retail banking advisors, commercial lenders, wealth management professionals, risk analysts, and technology specialists including Security Specialists, GRC professionals, and IT governance roles who collaborate across a globally recognized institution committed to inclusion, career development, and the Great Place to Work Certification earned for ten consecutive years.

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number: 26-14818

#LI-Hybrid

📌 Security Specialist (Toronto)
🏢 GTT
📍 Toronto