Director Technology Risk

• Provides subject matter expertise and technical guidance to technology aligned process owners.
• Ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.
• Consults with senior business management to ensure technology assessments are aligned and inform business operational risk assessments in a meaningful, actionable manner.
• Works within the Cyber Security Technology & Controls, Tech Risk & Controls Frameworks Team, in partnership with stakeholders from across Global Technology, you will lead the global programs to accurately represent and maintain the firm’s complex technology operations.
• Innovates and provides analysis and thought leadership to drive improvement and enhancement to the Firms’ Operational Risk framework, platform and improve the End to-End Technology Risk Management lifecycle.
• Drives and leads change initiatives across the Firm’s Risk Organization (both Technology and Business) to improve the understanding of technology risk.
• Establish a Proactive and Collaborative framework that ensures Personal Data of Fidelity Canada customers, employees and all other individuals’ data subjects is Identified and adequately Protected.
• Collaborate with functional owners to document existing data protection controls, identify potential gaps and enhancements and follow-through on the completion of agreed upon changes.
• Focus on identifying Personal Data book of records systems and assess data protection controls in place, establishing action plans to address any potential gaps.
• Establish formal DPO review and attestation processes on existing controls.
• Build organization awareness on key data protection requirements.
• Promote collaboration between all the groups that own data protection controls in their respective areas.
• Establish and Conduct Privacy Impact Assessment for Fidelity Canada projects, systems and business process enhancements.
• Contributes to the development and execution of BCP plan and strategies.
• Supporting the business during actual BCP events, including logistical planning, event coordination, communication, and supporting business resumption.
• Partner with other IS teams to review and develop business recovery requirements and strategies.
• Ensure appropriate testing including test preparation, postmortem analysis and test issues are documented, investigated, resolved, or corrective actions will be applied when possible.
• Chair change management meetings, maintaining logs of all changes, risk ratings, approvals, and closure activities.
• Represent FIC’s change management program including collaboration with FCC when possible.
• Maintain the ServiceNow Configuration database ensuring that all applications and processes are subject to change management and owners/approvers are up to date.
• Meet regularly with employees to provide timely feedback, support and coaching to foster individual and team growth and development.
• HR processes are being managed effectively

• Bonus goal development and attainment
• Preparing and delivering annual performance appraisals
• Employees are engaged, have the tools and resources to be successful, and have a clear understanding of what is expected of their role.
• Feedback from the senior leadership team.

• A strong ability to communicate (written and verbal).
• A strong sense of accountability and taking initiative to drive projects to completion.
• Emphasis on risk and audit an inquiring mind.
• Knowledge and understanding of clearing firm regulatory obligations, Canadian brokerage industry and brokerage operations, including the impact of technology on this market.
• Experience managing projects and scaling processes with company growth
• Ability to collaborate and influence across all levels of the organization.
• Effective presentation skills.
• Strong influencing skills. Gains acceptance of ideas and suggestions from business partners.
• Ability to plan, monitor, control projects, ensuring efficient utilization of technical and administrative resources, to achieve project objectives.

• University Degree or equivalent work experience.
• Experience in risk management, audit and risk programs.
• Professional designation or certificate in audit, risk management or internal control (e.g. ISACA)

• Experience in using common technology controls industry best practice (e.g., from NIST, ISO, ISACA, etc.) frameworks.
• Completed or in the process of completing CSC or IFIC CA designation is considered an asset.

• Parental leave top-up to 100% of your salary for a period of 25 weeks.
• Up to $650 for home office equipment.
• Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice.
• Diversity and inclusion programs, including an active network of Employee Resource Groups.
• Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation.

• Canada's Top 100 Employers

• Great Place To Work® Certified

• LinkedIn Top Companies in Canada

• Human Resource Director (HRD) - Best Place To Work

• Canadian Compassionate Companies – Certified
• Benefits Canada's Workplace Benefits Award - Future of Work Strategy
• TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
• Canadian HR Reporter's Most Innovative HR Team

Fidelity Investments