TekStaff's Client has a current vacancy for a IT Security Specialist

Duration : This is a 6 months contract located in Toronto, Ont /Hybrid

Job Description

MUST-HAVE Hard Skills:

1.) Very strong comms – written and verbal- key

2. 10+ years as an IT Risk Specialist with relevant experience in governance, risk and compliance management within regulated industries.

3.) Professional technology audit, risk, information security or technology control certification preferred (e.g., CISA, CRISC, CIA or equivalent), with practical experience performing assurance, validation or quality assurance reviews of audit/regulatory findings.

4) Formal training or demonstrated competency in audit testing techniques, evidence evaluation, issue remediation validation, root cause analysis and control operating effectiveness assessment.

5.) AI-enabled assurance transformation: Lead the design and implementation of an AI-enabled capability that supports challenge and QA reviews of remediation plans, milestones and evidence.

SOFT SKILLS:

- 1. six sigma
- 2.) CISSP certification or equivalent experience a plus. – nice to have
- 4.) Service-now

NICE-TO-HAVE

- 1. six sigma
- 2.) CISSP certification or equivalent experience a plus. – nice to have
- 4.) Service-now

Job Specific Accountabilities

We are looking for someone who is well-versed at providing governance, risk, compliance and issue remediation oversight and control best practices that meet the banks overarching Global Technology Solutions strategy and objectives. The individual will be responsible for partnering with Technology segments to support independent challenge and oversight of issue remediation plans impacting our information security control setting.



Here's some of what you may be asked to perform:

- Conduct sample-based testing using the IOR (Inspection, Observation, Reperformance) method to validate the design, implementation, operating effectiveness and sustainability of audit and regulatory remediation activities.
- Perform quality assurance to assess whether remediation plans are complete, risk-aligned and ready to proceed by leveraging a QA rubric, relevant evidence and auditor professional judgement.
- Lead and conduct independent, risk-focused reviews to confirm action plans, milestones and resolutions are credible, sufficiently evidenced and validation-ready - working with stakeholders across the three lines of defense to ensure effective risk mitigation and remediation.
- Provide advice and guidance to Technology segments and Technology Risk Services on various areas requiring subject matter expertise and interpretation: Audit & Assurance Standards; IT Risk Governance Control Frameworks, and GRC (Governance, Risk, and Compliance) frameworks.
- Contribute to the development of mature Governance Oversight & Control practices, through improvement of Risk Identification, Control Design and Operating Effectiveness.
- Identify emerging themes, understand trends,



and provide specialized business management advice to senior management and respective teams while raising industry, external and internal, enterprise and business awareness.
- AI-Enabled Assurance Transformation:
- Leading the design and implementation of an AI enabled bot to support challenge and QA reviews of remediation plans, milestones, and evidence for audit and regulatory findings.
- Translate existing challenge frameworks, QA rubrics, scoring criteria, and regulatory expectations into AI- consumable logic, prompts, and evaluation workflows.
- Develop and maintain AI models capable of:
- Assessing remediation plans for completeness, quality, and risk reduction
- Identifying gaps, inconsistencies, and control weaknesses
- Producing structured challenge feedback and scoring aligned to established rubrics
- Ensure AI solutions comply with enterprise information security, data protection, privacy, and model risk management standards
- Partners with model risk, privacy, legal, and technology teams to ensure responsible and compliant AI use

Job Requirements

What can you bring to to the bank? Share your credentials and your relevant experience and knowledge. It helps if you have:

- Demonstrated experience applying the IOR (Inspection, Observation, Reperformance) methodology, or comparable audit validation approaches, to test remediation design, implementation, operating effectiveness and sustainability.
- Ability to assess audit and regulatory remediation plans for audit/regulator readiness, including evidence sufficiency, traceability to commitments, milestone credibility, control ownership, residual risk and closure rationale.
- Strong auditor mindset with experience develop

📌 Information Technology Security Specialist (Toronto)
🏢 Tekstaff IT Solutions
📍 Toronto