1

Technology Risk Manager Jobs in Ontario (NOW HIRING)

Manulife is seeking an experienced Manager, Technology & Cyber Risk Standards Governance to drive consistent, scalable, and effective risk management standards and practices across the enterprise.

New

... Manager to join our team in Toronto ... The Technology Risk Consulting practice provides a variety of services to our clients. The ...

Our Technology Risk Services team is growing and we are looking for a Manager, GRC to join our team in Toronto. The Technology Risk Services practice provides a variety of services to our clients.

Risk Management Pay Details: $96,900 - $136,800 CAD TD is committed to providing fair and equitable ... Understanding of bank core technology platforms and credit systems. Exposure to application ...

New

Risk Management Frameworks - Ensure appropriate risk frameworks are in place to control market risk ... Model Development and Enhancement - Work with technology and business support groups to design and ...

Conduct independent risk assessments of technology, cyber, data, and operational risks, which includes assessment of inherent and residual risks and strength of risk management * Assess whether first ...

Risk Management Frameworks - Ensure appropriate risk frameworks are in place to control market risk ... Model Development and Enhancement - Work with technology and business support groups to design and ...

Our IT Risk Services team in Toronto is looking for a professional like you with the skills and ... Create workflows in Emergency Access Management, update rule sets, and create roles via GRC.

$150K - $180K/yr

Lead Risk Manager, Payment Fraud Toronto Onsite | Full-Time | Hybrid after onboarding | Reports to ... house technology stack supports 500+ leading retail and brand partners. Headquartered in the ...

next page

Showing results 1-20

Technology Risk Manager information

See Ontario salary details

$29K

$118.5K

$199.5K

How much do technology risk manager jobs pay per year?

As of May 30, 2026, the average yearly pay for technology risk manager in Ontario is $118,466.00, according to ZipRecruiter salary data. Most workers in this role earn between $88,500.00 and $143,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Technology Risk Manager, and why are they important?

To thrive as a Technology Risk Manager, you need expertise in risk assessment, cybersecurity principles, and regulatory compliance, often supported by a degree in information security or related fields. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC (governance, risk, and compliance) tools, and certifications like CISM or CISSP are typically required. Strong analytical thinking, communication, and stakeholder management skills help you translate technical risks into business terms and coordinate mitigation efforts. These abilities are critical to proactively identifying threats and ensuring organizational resilience against evolving technology risks.

What are some common challenges Technology Risk Managers face when working across different departments?

Technology Risk Managers often encounter challenges in aligning risk management strategies with the priorities of various business units. Departments may have differing levels of risk tolerance, technical understanding, and resource availability, which can make establishing consistent policies and controls difficult. Success in the role relies on strong communication and negotiation skills, as well as the ability to educate stakeholders about the importance of risk mitigation while balancing business objectives. Building collaborative relationships and maintaining flexibility are key to overcoming these cross-departmental challenges.

What are Technology Risk Managers?

Technology Risk Managers are professionals responsible for identifying, assessing, and mitigating risks associated with information technology systems and processes within an organization. They ensure that IT operations comply with regulations and best practices while safeguarding data and technology assets from threats such as cyberattacks, data breaches, and system failures. Their work involves developing risk management strategies, conducting risk assessments, and collaborating with other departments to ensure the organization's technology infrastructure is secure and resilient.

What is the difference between Technology Risk Manager vs Cybersecurity Analyst?

AspectTechnology Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISACISSP, CEH, Security+
Work EnvironmentRisk assessment, policy development, complianceMonitoring security threats, incident response, vulnerability analysis
Industry UsageFinancial, healthcare, technology firmsIT security teams, government agencies, corporations

The Technology Risk Manager focuses on identifying and mitigating overall technology risks and ensuring compliance, while the Cybersecurity Analyst concentrates on protecting systems from security threats and responding to incidents. Both roles require similar certifications and often work within the same industries, but their core responsibilities differ in scope and focus.

What cities in Ontario are hiring for Technology Risk Manager jobs? Cities in Ontario with the most Technology Risk Manager job openings:

Cyber Security Analyst - Governance, Risk & Compliance

EQ Bank | Equitable Bank

Toronto, ON โ€ข On-site

Full-time

Medical, Dental, Vision, Life, PTO

Posted 9 days ago


Job description

Join a Challenger

Being a traditional bank just isn't our thing, so we challenge ourselves to get creative in providing innovative banking solutions for Canadians.

How do we get there? With a talented team of inquisitive and agile challengers that break through the status quo. So, if you're passionate about redefining the future of banking-while having fun-this could be your next big opportunity.

Our company continues to grow, and today we serve more than 800,000 customers acrossย Canadaย through Equitable Bank,ย Canada'sย Challenger Bank, and have been around for more than 50 years. Equitable Bank's wholly-owned subsidiary, Concentra Bank, supports credit unions acrossย Canadaย that serve more than six million members. Together we have overย $142 billionย in combined assets under management and administration, with a clear mandate to drive change in Canadian banking to enrich people's lives.ย Our customers have named our EQ Bank digital platform (eqbank.ca) one of the top banks in Canada on the Forbes World's Best Banks list since 2021.ย 

The Work
ย 
ย 
The Cyber Risk & Governance Analyst, as part of the Information Security Governance & Third-Party Cyber risk team, is responsible for analyzing and assessing the organization's information security risks and ensuring that risk management activities are operationalized to keep the bank's Technology Risk profile within the organization's risk appetite. This includes managing the company's risk register, ensuring that it is accurate, up-to-date, and reflective of the current risk environment. Facilitating risk identification and assessment workshops with stakeholders across the organization, recording risk information in the register and assigning risk owners to ensure timely and effective risk mitigation. Also ensures that risks are being effectively monitored and reported up to management. Additionally, this role supports the effective management of third-party cyber risks by conducting third-party cyber risk assessments. The analyst will collaborate with other technology departments, the Risk Management Group, Internal Audit, and key business stakeholders throughout the company to manage and maintain the risk register, evaluate overall information technology risk, and manage reporting on digital and technology third-party cyber risks. The analyst will also provide recommendations to enhance the organization's information security posture, assist in implementing information security policies and guidelines, and support regulatory compliance efforts. While third-party cyber risk management activities are not a primary function of this role, this role is expected to support the third-party cyber risk management activities as required.ย 
The Core Responsibilities!

By collaborating with multi-disciplinary teams, cross-functional departments, stakeholders, and vendors, this role is responsible for implementing and measuring various aspects of corporate cyber risk and compliance matters. The role will support project teams and work towards ensuring that the organization is meeting the necessary regulatory requirements.ย 

  • Maintaining and updating the cyber risk register to ensure it accurately reflects the current risk profile of the organization.ย 

  • Collaborating with stakeholders across the organization to identify and assess potential risks and control measures, and documenting these in the risk register.ย 

  • Regularly reviewing risk ratings and mitigation strategies in the risk register to ensure they remain relevant and effective.ย 

  • Monitoring and reporting on cyber risk management activities including trends and remediation progress to management and other stakeholders.ย 

  • Identifying opportunities to improve risk management processes and the use of the risk register and working with relevant stakeholders to implement these improvements.ย 

  • Staying up to date with industry trends and best practices in cyber risk management.ย 

  • Ensuring the alignment between the risk register and the company's overall cyber risk strategy.ย 

  • Providing training and support to other employees on risk management processes and the use of the risk register.ย 

  • Conducting cyber-risk assessments of third-party vendors, including gathering data, performing analysis and providing recommendations.ย 

  • Reviewing and analyzing vendor security policies, procedures and controls to ensure compliance with regulatory requirements and industry standards.ย 

  • Developing risk assessment reports and other documentation for third-party vendors, including risk ratings, mitigation plans, and recommended actions.ย 

  • Collaborating with stakeholders to ensure that third-party vendor risk assessments are conducted in a timely and effective manner.ย 

  • Assist with the preparation and execution of audit, red team, and tabletop exercises by efficiently collecting and organizing relevant information, and effectively communicating findings and recommendations to key stakeholders.ย 

  • Provide cyber security governance and cyber risk management expertise and guidance to project teams and other stakeholders.ย 

  • Fostering a risk-aware culture throughout the organization, where cyber risk is integrated into all operational processes.ย 

Let's Talk About You!
  • Bachelor's degree in computer science, Information Security, or a related field.ย 

  • At least 3 years of experience in cyber security governance and risk management (or related 2nd or 3rd line-of-defense).ย 

  • Strong understanding of cyber security risk management methodologies and frameworks.ย 

  • Knowledge of industry regulations such as NIST, OSFI B-13 and OSFI B-10.ย 

  • Strong analytical and problem-solving skills.ย 

  • Excellent communication and interpersonal skills.ย 

  • Maintain or working towards a CRISC, ISO27001 Lead implementer/Lead Auditor, CISA or CISM certification or similar is required.ย 

What we offer [For full-time permanent roles]
ย 
Competitive discretionary bonusย 
Market leading RRSP match program
ย  Medical, dental, vision, life, and disability benefits
ย  Employee Share Purchase Plan
Maternity/Parental top-up while you care for your little one
Generous vacation policy and personal daysย 
ย  Virtual events to connect with your fellow colleagues
ย  Professional development and comprehensive Career Development program
ย  A fulfilling opportunity to join one of the top FinTechs and help create a new kind of banking experience

The incumbent will be working hybrid and in office time will be spent working from Equitable Bank's additional office space located at 2200-25 Ontario Street, Toronto, ON.
ย ย 
Equitable Bank is deeply committed to inclusion. Our organization is stronger and our employees thrive when we honour and celebrate everyone's diverse experiences and perspectives. In tandem with that commitment, we support and encourage our staff to grow not just in their career path, but personally as well.ย 

We commit to providing a barrier-free recruitment process and work environment for all applicants. Please let us know of any accommodations needed so that you can bring your best self to the application process and beyond.ย All candidates considered for hire must successfully pass a criminal background check and credit check to qualify for hire. While we appreciate your interest in applying, an Equitable recruiter will only contact leading candidates whose skills and qualifications closely match the requirements of the position.
ย 
We can't wait to get to know you!ย 
apply for this job