Leader, BISO & IT Compliance Management (14 Month Contract)

Leader, BISO & IT Compliance Management (14 Month Contract)

At Interac, we design and deliver products and solutions that give Canadians control over their money so they can get more out of life. But that’s not all. Whether we’re leading real-time money movement, driving innovative commerce solutions like open payments for transit systems, or making advancements in new areas like verification and open banking, we are playing a key role in shaping the future of the digital economy in Canada.

Want to make a lasting impact amongst a community of creative thinkers, problem solvers, technical virtuosos, and high-performance application developers? We want to hear from you.

Reporting to the Head, Infrastructure & Operations, the Leader, BISO (Business Information Security Office) & IT Compliance Management will be the operational audit, risk and compliance primary point of contact inside IT Operations. This role will be responsible for IT Operations compliance as it relates to industry certifications (ISO, PCI, SOC, SAE, etc.) and contractual compliance obligations as it relates to Interac product and services in market.

You'll be responsible for:

• Leading and managing an IT Operations specific governance, risk and compliance practice.
• Leading and managing high performance teams comprising of Compliance, Asset, Configuration and Knowledge Management professionals.
• Managing the IT Operations Risk Management Process, including related ServiceNow modules.
• Creating and managing the IT Operations Compliance Library, Risk & Compliance integrated reporting framework
• Leading various audits, risk, control design assessments and engaging cross functional internal and external stakeholders to drive risk and compliance remediation
• Evolving and maturing Interac’s key business units’ accountabilities with respect to governance, risk, and compliance
• Fostering relationships with cross-functional teams to understand key technologies, risks and controls including emerging risks/challenges
• Provide regulatory, risk, and compliance guidance and advisory services. Supporting teams throughout the lifecycle of their technical controls
• Developing ongoing technology risk reporting, monitoring key trends, and defining metrics to regularly measure control effectiveness
• Enforcing adherence to internal policies, procedures, cybersecurity frameworks, and applicable regulatory guidelines.
• Influencing behavior to reduce risk and foster a strong technology and operational risk management culture 
• Representing Operational Risks and issues in relevant governance committees and facilitating the effectiveness of risk forums in supporting decision making
• Applying risk management mindset and negotiating with the identification, classification and addressing of issues.
• Leading the Service Asset and Configurations (CMDB) team to ensure effective management and operation of HAM, SAM, recording/maintaining configuration items (CIs) within scope, CMDB/CSDM lifecycle
• Enforcing the CMDB strategy for the enterprise
• Documentation and Knowledge Management 
• Building a high-performance environment and implementing people strategy that attracts, retains, develops, and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviors, communicating vision/values/business strategy, and managing succession and development planning for the team.
   

You bring:

• 10+ years’ experience in IT Operations with 5+ years of IT governance, risk, audit, and compliance experience
• Bachelor’s degree in computer science, or equivalent work experience
• ISO 27001/31000 certification
• CISSP – Certified Information Systems Security Professional
• Excellent written and verbal communication skills.
• Strong stakeholder and relationship management skills.
• Keen attention to detail with an aptitude for problem-solving, challenging the status quo, and thinking outside the box.
• Demonstrable technical experience, and a breadth of technical and IT operational knowledge
• Demonstrable experience with audit and compliance responsibilities inside IT Operations
• Demonstrable experience managing risk and compliance of IT people, process and technology
• Demonstrable experience supporting the development of compliance documentation and libraries
• Experience in GRC, Audit, or comparable risk management role.
• Experience with Asset management and CMDB 
• Experience with ServiceNow SaaS platform
• Passionate about IT Compliance Management
• Must be eligible to work for Interac Corp. in Canada in a Full Time Capacity

Interac requires employees to complete a background check that is completed by one of our service providers.  We use this service to complete the following checks:

• Canadian criminal record check;
• Public safety verification;
• Canadian ID cross-check;
• 5-year employment verification;
• Education verification; and
• If applicable, Credit Inquiry and Social Media Check

How we work
We know that exceptional people have great ideas and are passionate about their work.  Our culture encourages excellence and actively rewards contributions with:
Connection: You’re surrounded by talented people every day who are driven by their passion of a common goal.
Core Values:  They define us. Living them helps us be the best at what we do.
Compensation & Benefits: Pay is driven by individual and corporate performance and we provide a multitude of benefits and perks.
Education: To ensure you are the best at what you do we invest in you