Global Technology Risk Manager

We are seeking a highly motivated Technology Risk Manager to strengthen our global risk management capabilities. This role will be the guardian of our Global Technology Risk Management methodology and risk register, ensuring consistency, operational excellence, and value delivery across the enterprise and line of business. The Manager will drive the continuous improvement of the Technology Risk Management framework, oversee the Third-Party Risk Management (Tech TPRM) process, and ensure timely delivery of monthly metrics and performance reports. Acting as the bridge between Risk Analysts, Business, IT Departments and Cyber Advisory, this leader will manage ad hoc risk assessments and guide the team in identifying, evaluating, and reporting on technology risks.

Additionally,Serve as the primary risk oversight function for IT leadership across all BRP business units, ensuring technology risks are proactively identified, challenged, evaluated, and managed in alignment with BRP's risk appetite and business objectives.

YOU’LL HAVE THE OPPORTUNITY TO:

- Lead the Technology Risk Management team, ensuring effective collaboration and delivery.
- Evolve and manage the Technology Risk Management framework and methodology.
- Oversee and operationalize the technology risk register, ensuring risks are logged, assessed, tracked, and reported accurately.
- Coordination with senior IT management to monitor key Technical Debts, associated residual risks, and action plans
- Drive the Tech TPRM process, ensuring vendor risk assessments and mitigation plans are consistently executed.
- Produce and present executive reports on residual IT risks and key risk indicators to senior stakeholders.
- Support ad hoc and project-based risk assessments, in close alignment with Cyber Advisory.
- Partner with IT/OT Compliance teams to align on action plans related to internal IT and OT controls.
- Establish and track monthly metrics to monitor program effectiveness and team performance.
- Close coordination with the global IT compliance team to manage IT risk posture (quarterly metrics, accumulation of technical risks)
- Developing relationships with key global executives to understand, map, and address risk scenarios associated with the various BRP geographies

YOU’LL THRIVE IN THIS ROLE IF YOU HAVE THE FOLLOWING SKILLS AND QUALITIES:

- Bachelor’s degree in Information Security, Risk Management, or a related field.
- Solid experience in technology risk analysis (quantitative and qualitative).
- Strong knowledge of NIST Risk Management Framework (NIST RMF), ISO 27001 standards, and the FAIR methodology for quantitative risk analysis.
- Previous experience working closely with Advisory teams on risk, security, or compliance topics.
- Demonstrated ability to prepare and deliver executive-level reports on IT residual risks.
- Strong understanding of IT and OT internal controls, SOx compliance, and related governance frameworks.
- Proven leadership skills with the ability to guide and inspire a team of analysts.
- Excellent communication and interpersonal skills, with fluency in English
- Knowledge of other languages, such as German, Spanish, or Finnish, will be considered an asset
- Ability to work on-site 3 days per week at Montreal, Sherbrooke, or Valcourt.