Technology Risk Management Specialist

Inspirational, innovative and entrepreneurial - this is how we describe our empowered teams. Combine your passion with purpose and join a culture that is thriving in the face of change.

Make an impact with our Technology - Cyber Security team as a Technology Risk Management Specialist. This diverse team of tech-savvy problem solvers enables MNP to take a proactive and prepared approach to cyber crime and capitalize on new technologies and innovations. As a trusted advisor, you’ll investigate threats, develop policies and enhance infrastructure to minimize the impact of security-related events to protect MNP's business operations and reputation.

MNP is proudly Canadian. Providing business strategies and solutions, we are a leading national accounting, tax and business advisory firm in Canada. Entrepreneurial to our core, our talented team members transcend obstacles into opportunities and are successfully transforming mid-market business practices.

Responsibilities

• Leveraging experience in Risk Management, develop and implement of the cybersecurity risk management program based on the Firm’s acceptable risk tolerance levels
• Conduct business impact analysis and information security risk assessment on new projects, initiatives, mergers and acquisitions
• Advise and support the business on day to day activities and provide guidance on the remediation plans to mitigate risk
• Document activities and findings in the risk assessment report review and approval processes
• Develop dashboards and reporting on Firm risk and compliance activities
• Track, monitor and follow up on all risk findings in the risk register
• Help evaluate and improve Cyber Security policies and ensure compliance by all stakeholders
• Work with Cyber Security team members in evaluating the efficacy of each control and provide recommendations to increase security posture
• Define, capture, and report Key Performance Indicators for security dashboards in the areas of risk and compliance management, Cyber Security training and awareness
• Actively participate in tabletop exercises and disaster recovery drills, and provide recommendations as part of lessons learned

Skills and Experience

• 10 years of experience in Cyber Security, with at least 5 years of Security GRC (Governance, Risk and Compliance) within a large organization
• Completion of CISM, CISSP or other relevant security certificates is considered an asset
• Knowledge and experience with Cyber Security and Information Technology domains 
• Knowledge of cloud security (AWS & Azure)
• Demonstrated analytical and critical thinking skills when developing remediation recommendations and findings prioritization
• Deep knowledge and ability to apply frameworks and controls from international standards such as NIST and CIS
• Continuous research on current and emerging cyber threats, commonly used tactics, techniques and procedures by malicious actors  

MyRewards@MNP

With a focus on high-potential earnings, MNP is proud to offer customized rewards that support our unique culture and a balanced lifestyle to thrive at work and outside of the office. You will be rewarded with generous base pay, vacation time, 4 paid personal days, a group pension plan with 4% matching, voluntary savings products, bonus programs, flexible benefits, mental health resources, exclusive access to perks and discounts, professional development assistance, MNP University, a flexible ‘Dress For Your Day’ environment, firm sponsored social events and more!

Diversity@MNP

We embrace diversity as a core value and celebrate our differences. We believe each team member contributes unique gifts and amplifying their potential makes our business stronger. We encourage people with disabilities to apply!

#LI-Hybrid