Senior Analyst, Technology Assurance & Advisory

• The engagements span across evaluating, monitoring and improving the management of technology risk at Loblaw and the candidate should have experience in working on one or more of the following areas:

• Cyber-security, Privacy, and Penetration Testing, including knowledge of penetration testing frameworks
• System, network, and infrastructure optimization
• Data governance
• Data analytics and visualization
• System implementations, including cloud applications
• Foundational understanding of the three lines of defense
• Foundational understanding and knowledge of risk and control assessments supporting systems, application security and identity access management
• Deliver and present highly visual, creative, client-focused deliverables and presentations

• Drive planning, execution and reporting of multiple high-priority and high-visibility Assurance and Advisory engagements, focusing on governance, risk, controls, and performance improvements
• Partner and collaborate with cross-functional teams to improve existing management processes or to build new processes and thought leadership around our businesses
• Provide independent assurance, aiming to improve internal control, reduce risk exposures, verify compliance with policies & procedures, and validate the efficient use of resources

• Create and present highly visual, creative, client-focused deliverables and presentations, which connect the dots in a simple and business-oriented way, capturing current and emerging risks, potential issues, opportunities, and mitigating activities which are meaningful and practical for the businesses

• Champion client specific initiatives to enhance the quality of our service delivery including benchmarking, internal / external research, industry events, thought leadership, relationship building, training and competency development

• Manage client relationships and communication around the project lifecycle with cross-functional teams
• Proactively develop and own relationships with key stakeholders in the business to ensure we are adaptable to changing business needs and adding value in the right direction

• Participate as an active member of the delivery teams and mentor junior team members through coaching and leading by example
• Review the quality of the fieldwork and deliverables prepared by junior team members

• A Bachelor’s degree in Information Technology or a related field such as IT Systems, Computer Science, IT Management, Data Analytics or Engineering
• Certified Information Systems Auditor (CISA), CPA, CISSP, CISM or CIA designation is a strong asset
• 2+ years of experience in technology roles – preferred roles are systems design, solutions architect, technology consulting/ Big4 firms, internal audit, cyber-security, IT risk management.
• Base knowledge of assurance, governance, risk and control frameworks including COBIT, ISF, NIST and ISO, Service Organization Controls (SOC) Reporting standards (e.g. CSAE 3416, Section 5025, AT 101) is an asset
• Experience working on large enterprise IT implementations including project risks and controls
• Excellent communication skills, and a demonstrated ability to effectively communicate with stakeholders at all levels (both written and verbal)
• Proven problem-solver, with an innovative and entrepreneurial mindset and self-starter with a strong work ethic and ‘no-excuses’ mentality

Loblaw