Manager, Technology Risk & ControlsLead the Technology Risk and Cybersecurity Assurance function within Internal Controls at Oxford, reporting to the Senior Manager, Internal Controls. Accountable for establishing and operating the technology risk and cybersecurity assurance framework across the organization and for driving risk-informed decision‑making with stakeholders in Technology, Operations and business leadership.ResponsibilitiesTechnology Risk & Cybersecurity AssuranceLead the development, implementation, and continuous enhancement of the Operational Technology Cybersecurity Framework, including maturity assessments across assets, systems and applications.Oversee technology risk identification, assessment and mitigation.Ensure appropriate cybersecurity controls and ITGCs are designed and operating effectively across internal teams and managed service providers.Drive timely remediation of risks, audit findings and control deficiencies.Risk Management and ReportingOwn and maintain the Technology Risk Register aligned with enterprise risk standards.Define and monitor KRIs to assess risk exposure and control effectiveness.Perform thematic analysis to identify emerging risks, trends, and systemic control gaps across the technology landscape.Deliver executive‑level technology risk reporting and insights to senior leadership and Operational Risk.Governance, Policies and FrameworksDevelop and continuously improve technology risk policies, standards and procedures.Ensure alignment with enterprise frameworks and leading practices (NIST, ISO, COBIT, CIS).Embed risk management into technology operations, projects and delivery processes.Stakeholder Management, Advisory and AssuranceServe as a trusted advisor to Technology,



Operations and business leaders, providing risk‑based guidance and fostering a strong risk‑aware culture.Lead internal and external technology risk, cybersecurity and ITGC audits, including stakeholder coordination, assurance requests, response management and deliverable quality review.Drive accountability for the timely remediation of audit findings, control deficiencies and key technology risks.Represent Service Assurance in governance forums, steering committees and cross‑functional initiatives, influencing risk‑informed decision‑making.Conduct targeted reviews of systems, processes and controls to assess risk exposure, control effectiveness and improvement opportunities.Training, Awareness and Continuous ImprovementLead cybersecurity and technology risk awareness initiatives, developing guidance and training to strengthen risk management and control practices.Monitor regulatory developments and industry trends, ensuring frameworks, processes and tools remain aligned with leading practices.Drive continuous improvement by enhancing risk management capabilities, promoting proactive risk identification and fostering a strong risk‑aware culture.Leadership and People ManagementLead, mentor and develop a high‑performing team, fostering a collaborative, accountable culture and building capability in technology risk,



cybersecurity and assurance.Set clear expectations, manage priorities and provide direction in complex or ambiguous situations to ensure the timely delivery of high‑quality outcomes.Required Skills & Experience5–7 years of experience in technology risk, cybersecurity, internal controls, audit or regulatory compliance.Strong knowledge of technology risk management, cybersecurity principles, IT General Controls (ITGCs) and industry frameworks including NIST, ISO, COBIT, and CIS.Proven experience leading teams, driving accountability, supporting internal and external audits and operating effectively in professional services or Big‑4 environments.Excellent analytical, communication and stakeholder management skills, with the ability to identify risks and control gaps, influence decision‑making and translate complex issues into actionable insights.Experience leveraging automation and AI to enhance risk management and assurance processes.Highly organized, proactive and adaptable, with advanced proficiency in Excel, PowerPoint and Word.Preferred Skills & ExperienceRelevant certifications (CISA, CRISC, CISSP, CISM).Experience with Resolver or similar GRC platforms.Work ArrangementHybrid work guideline requires teams to come to the office a minimum of 4 days per week.CompensationSalary range: $103,000.00 – $157,000.00 per year. Eligible for an annual incentive award and participation in group benefits and retirement plans.Equal Opportunity EmployerFrom hire to retire, we are an equal chance employer committed to an inclusive, barrier‑free recruitment and selection process that extends all the way through your employee experience.#J-18808-Ljbffr

📌 Manager, Technology Risk & Controls - $103,000 - $157,000 A Year (Winnipeg)
🏢 Oxford
📍 Winnipeg