The Technology Risk Consulting practice provides a variety of services to our clients. The ... Engagement risk management: quality assurance through file review, engagement planning, development ...
The Technology Risk Consulting practice provides a variety of services to our clients. The ... Engagement risk management: quality assurance through file review, engagement planning, development ...
... Cyber Risk Management & Transformation practice. The successful candidate will support ... This role offers exposure to a broad range of industries, technologies, and strategic initiatives ...
... Cyber Risk Management & Transformation practice. The successful candidate will support ... This role offers exposure to a broad range of industries, technologies, and strategic initiatives ...
... Cyber Risk Management & Transformation practice. The successful candidate will support ... This role offers exposure to a broad range of industries, technologies, and strategic initiatives ...
... Cyber Risk Management & Transformation practice. The successful candidate will support ... This role offers exposure to a broad range of industries, technologies, and strategic initiatives ...
... Cyber Risk Management & Transformation practice. The successful candidate will support ... This role offers exposure to a broad range of industries, technologies, and strategic initiatives ...
... Cyber Risk Management & Transformation practice. The successful candidate will support ... This role offers exposure to a broad range of industries, technologies, and strategic initiatives ...
... technology risk management. Executive Reporting: 3+ years of dedicated experience crafting ... executive-grade risk reports and presentations for C-suite or steering committees. Technical & Core ...
... technology risk management. Executive Reporting: 3+ years of dedicated experience crafting ... executive-grade risk reports and presentations for C-suite or steering committees. Technical & Core ...
Who you'll work with This role sits within the Enterprise & Operational Risk Management function and works closely with senior leaders across Investments, Technology, Member Services, Finance, Legal ...
Who you'll work with This role sits within the Enterprise & Operational Risk Management function and works closely with senior leaders across Investments, Technology, Member Services, Finance, Legal ...
System asset management tooling. * Supporting assessments for broader information security topics as well as IT General Controls (ITGCs). * Monitoring relevant technology risk standards and practices.
System asset management tooling. * Supporting assessments for broader information security topics as well as IT General Controls (ITGCs). * Monitoring relevant technology risk standards and practices.
System asset management tooling. * Supporting assessments for broader information security topics as well as IT General Controls (ITGCs). * Monitoring relevant technology risk standards and practices.
System asset management tooling. * Supporting assessments for broader information security topics as well as IT General Controls (ITGCs). * Monitoring relevant technology risk standards and practices.
Who you'll work with This role sits within the Enterprise & Operational Risk Management function and works closely with senior leaders across Investments, Technology, Member Services, Finance, Legal ...
Who you'll work with This role sits within the Enterprise & Operational Risk Management function and works closely with senior leaders across Investments, Technology, Member Services, Finance, Legal ...
System asset management tooling. * Supporting assessments for broader information security topics as well as IT General Controls (ITGCs). * Monitoring relevant technology risk standards and practices.
System asset management tooling. * Supporting assessments for broader information security topics as well as IT General Controls (ITGCs). * Monitoring relevant technology risk standards and practices.
The Senior Director partners closely with Technology, Legal/Privacy, Product, and Go-to-Market ... Manage third-party/vendor risk through due diligence, contractual requirements, and ongoing ...
The Senior Director partners closely with Technology, Legal/Privacy, Product, and Go-to-Market ... Manage third-party/vendor risk through due diligence, contractual requirements, and ongoing ...
Manager, Vendor & Risk Management
Toronto, ON · On-site
... Risk Management to add to our team in Toronto ... You'll be working as part of a small, innovative team to help enable technology enhancements within ...
Manager, Vendor & Risk Management
Toronto, ON · On-site
... Risk Management to add to our team in Toronto ... You'll be working as part of a small, innovative team to help enable technology enhancements within ...
About Us Optimus SBR is a leading management consulting firm and award-winning workplace where we ... Deliver technology risk and advisory engagements within agreed scope, timelines, budgets, and ...
About Us Optimus SBR is a leading management consulting firm and award-winning workplace where we ... Deliver technology risk and advisory engagements within agreed scope, timelines, budgets, and ...
IT GRC Coordinator
Stoney Creek, ON · On-site
CA$53K - CA$73K/yr
This is a supportive role that assists with maintaining IT policies, tracking IT compliance activities, and supporting IT risk management practices, with a focus on FSRA IT Risk Management Guidance.
Quick apply
IT GRC Coordinator
Stoney Creek, ON · On-site
CA$53K - CA$73K/yr
This is a supportive role that assists with maintaining IT policies, tracking IT compliance activities, and supporting IT risk management practices, with a focus on FSRA IT Risk Management Guidance.
IT GRC Coordinator
CA$53K - CA$73K/yr
This is a supportive role that assists with maintaining IT policies, tracking IT compliance activities, and supporting IT risk management practices, with a focus on FSRA IT Risk Management Guidance.
IT GRC Coordinator
CA$53K - CA$73K/yr
This is a supportive role that assists with maintaining IT policies, tracking IT compliance activities, and supporting IT risk management practices, with a focus on FSRA IT Risk Management Guidance.
Director, Risk Management
Toronto, ON · Hybrid
CA$140K - CA$260K/yr
... managing a team ... About the team The role will be supporting our Technology and Transformation, Strategy Risk and ...
Director, Risk Management
Toronto, ON · Hybrid
CA$140K - CA$260K/yr
... managing a team ... About the team The role will be supporting our Technology and Transformation, Strategy Risk and ...
As the Senior Analyst, IT Risk Analytics & Reporting , you work with data enhancement, and ... Manage metric lifecycle (intake, development, documentation, enhancement, retirement) in ...
As the Senior Analyst, IT Risk Analytics & Reporting , you work with data enhancement, and ... Manage metric lifecycle (intake, development, documentation, enhancement, retirement) in ...
Ensure quarterly Regulatory Compliance and Risk and Control Assessments and all Canadian regulatory ... Perform annual updates as needed on the Technology Regulatory Management Operating Procedures.
Ensure quarterly Regulatory Compliance and Risk and Control Assessments and all Canadian regulatory ... Perform annual updates as needed on the Technology Regulatory Management Operating Procedures.
Our technology and innovation, partnerships and networks combine to deliver a unique set of ... Title and Summary Strategic Risk Management Director The Strategic Risk team is looking for a ...
Our technology and innovation, partnerships and networks combine to deliver a unique set of ... Title and Summary Strategic Risk Management Director The Strategic Risk team is looking for a ...
The Technology Risk Services practice provides a variety of services to our clients. The successful ... to management through the preparation of reports and analyses; preparation of advisory and ...
The Technology Risk Services practice provides a variety of services to our clients. The successful ... to management through the preparation of reports and analyses; preparation of advisory and ...
Technology Risk Management information
See Ontario salary details
$28.5K - $42K
5% of jobs
$42K - $55.5K
6% of jobs
$55.5K - $69K
4% of jobs
$69K - $82.5K
5% of jobs
$89.3K is the 25th percentile. Wages below this are outliers.
$82.5K - $96K
8% of jobs
$96K - $109.5K
11% of jobs
The median wage is $114.8K / yr.
$109.5K - $123K
24% of jobs
$132K is the 75th percentile. Wages above this are outliers.
$123K - $136.5K
16% of jobs
$136.5K - $150K
8% of jobs
$150K - $163.5K
7% of jobs
$163.5K - $177K
4% of jobs
$28.5K
$112.1K
$177K
How much do technology risk management jobs pay per year?
What is a Technology Risk Management job?
A Technology Risk Management job involves identifying, assessing, and mitigating risks related to an organization's technology infrastructure, systems, and data. Professionals in this field develop policies, ensure compliance with regulatory requirements, and implement security controls to protect against cyber threats and operational failures. They collaborate with IT, security, and business teams to address vulnerabilities and enhance resilience. The role requires knowledge of risk assessment frameworks, regulatory standards, and emerging technology risks.
What are the key skills and qualifications needed to thrive in the Technology Risk Management position, and why are they important?
To excel in Technology Risk Management, you need a background in information security, risk assessment, and regulatory compliance, often supported by a relevant degree and experience in IT or cybersecurity. Familiarity with risk management frameworks (such as NIST or ISO 27001), governance, risk and compliance (GRC) tools, and certifications like CISA, CISSP, or CRISC are highly valued. Strong analytical thinking, communication skills, and the ability to influence and collaborate across departments are vital soft skills for this role. These competencies are crucial to effectively identify, mitigate, and communicate technology risks, helping organizations manage threats while ensuring business continuity and compliance.
What are the typical daily responsibilities for someone working in Technology Risk Management?
Professionals in Technology Risk Management are typically responsible for identifying and assessing potential technology-related risks, developing policies and controls to mitigate those risks, and monitoring compliance with internal and external regulations. Their day-to-day activities often include conducting risk assessments, coordinating with IT teams on security initiatives, preparing reports for senior management, and responding to incidents or audit findings. Collaboration with various departments such as IT, compliance, and business units is frequent to ensure comprehensive risk oversight. This role requires staying up-to-date on emerging threats and evolving regulatory requirements to proactively manage the organization's risk posture.

Job description
At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.
Our Technology Risk Services services team is growing and we are looking for Senior Managers to join our team in Toronto. The Technology Risk Consulting practice provides a variety of services to our clients. The successful candidate will focus primarily on providing IT Audit and Assurance based services to clients. They will also be involved in training and guiding our new campus hires.
What you will do
- Working closely with our Audit teams to scope processes, conducting assessments of IT risks and controls, including general IT controls and automated controls embedded within information systems in support of our external audit engagements.
- Performing other engagements within the context of supporting the external audit, or attestation engagements such as System and Organization Control (SOC) reports.Â
- Reviewing new and existing systems in terms of adequacy of controls, security, operational considerations, conversion issues, and project management assessment.
- The review and provision of advice and assistance on business process controls.
- Engagement risk management: quality assurance through file review, engagement planning, development and monitoring, engagement profitability - Simultaneously deliver multiple client engagements of varying size, scope and complexity.
- Business development: taking an active role in the business community to increase awareness of the firm's services and level of commitment to the local market, developing and maturing relationships with internal staff and clients, developing proposals, identifying and pursuing opportunities to increase the practice's penetration in the public and private sector.
- Service Delivery: conducting research, performing technical testing, writing reports, conducting interviews and communicating regularly with clients and resources.
- Guiding field engagement teams as well as coaching and mentoring junior staff members.
What you bring to the role
The successful candidate will possess the following skills and behaviors:
- Experience within an external audit practice auditing clients in the Financial Services industry. From this, a strong understanding of business processes associated with banks and capital market entities in Canada. For example, experience should cover multiple of the following areas: Markets and Exchanges, Clearing Houses, Trade Repositories, Fund Administrators, Custodial Service Providers, Transfer Agencies, Retail and Corporate Lending, the impact of IFRS9 on lending processes, and Broker Dealers.
- Completion of one or a combination of the following designations CPA, CISA, CISSP, CRISC. The completion of a CPA or equivalent accounting designation is highly recommended.
- At least 8+ years of relevant experience in assessing information technology or business process risk ideally within a large consulting practice.
- Strong understanding and experience with IT General Controls and controls based audits (e.g., SOC reporting) is preferred.
- Ability to work both - with little supervision and within a team environment.
- Bachelor’s degree in Business or Computer Science degree required, ideally with a major in accounting.
- Excellent communication skills being able to express insights, both written and orally.
- Demonstrated ability to learn and succeed in a fast-paced environment.
- Attention to detail and strong organization and analytical skills.
- Strong understanding of business risks and audit risks.
- Have a high degree of personal confidence, enthusiasm and drive.
Providing you with the support you need to be at your best
Our Values, The KPMG Way
Integrity, we do what is right |Â Excellence, we never stop learning and improving |Â Courage, we think and act boldly | Together, we respect each other and draw strength from our differences |Â For Better, we do what matters
KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.
Adjustments and accommodations throughout the recruitment process
At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.
AI Usage
Weembrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.
We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.
Qualifications:The successful candidate will possess the following skills and behaviors:
- Experience within an external audit practice auditing clients in the Financial Services industry. From this, a strong understanding of business processes associated with banks and capital market entities in Canada. For example, experience should cover multiple of the following areas: Markets and Exchanges, Clearing Houses, Trade Repositories, Fund Administrators, Custodial Service Providers, Transfer Agencies, Retail and Corporate Lending, the impact of IFRS9 on lending processes, and Broker Dealers.
- Completion of one or a combination of the following designations CPA, CISA, CISSP, CRISC. The completion of a CPA or equivalent accounting designation is highly recommended.
- At least 8+ years of relevant experience in assessing information technology or business process risk ideally within a large consulting practice.
- Strong understanding and experience with IT General Controls and controls based audits (e.g., SOC reporting) is preferred.
- Ability to work both - with little supervision and within a team environment.
- Bachelor’s degree in Business or Computer Science degree required, ideally with a major in accounting.
- Excellent communication skills being able to express insights, both written and orally.
- Demonstrated ability to learn and succeed in a fast-paced environment.
- Attention to detail and strong organization and analytical skills.
- Strong understanding of business risks and audit risks.
- Have a high degree of personal confidence, enthusiasm and drive.
Providing you with the support you need to be at your best
Education:UNAVAILABLEEmployment Type: FULL_TIME