Technology Risk Assessment Consultant (ID#5446)

New Value Solutions, a national IT consulting company, is seeking a Technology Risk Assessment Consultant to support technology initiatives for one of our public sector clients.

This role is ideal for a senior consultant with expertise in technology risk management, security governance, vendor risk assessments, and technology advisory services. Working closely with business stakeholders, project teams, technology leaders, and third-party vendors, you will assess technology-related risks, evaluate security and compliance controls, and provide practical recommendations that support informed business decisions.

Responsibilities

Conduct technology risk assessments for new and existing technology initiatives.

Engage with business sponsors, project managers, architects, security teams, privacy representatives, and third-party vendors to understand business objectives, solution architecture, and implementation plans.

Review technology designs, security documentation, vendor responses, architecture diagrams, and compliance documentation.

Perform threat modelling and identify technology, security, operational, privacy, and compliance risks.

Assess the effectiveness of existing security controls and identify control gaps.

Develop practical, risk-based recommendations to mitigate identified risks.

Prepare clear and concise risk assessment reports suitable for both technical and executive audiences.

Present findings and recommendations to governance committees, project sponsors, and senior stakeholders.

Support technology governance processes by providing independent, objective technology risk advice.

Maintain effective working relationships with internal stakeholders and external vendors throughout the assessment process.

Requirements

5+ years of experience performing technology risk assessments, IT risk consulting, security governance, IT audit, or related advisory services.

Experience assessing cloud, SaaS, enterprise applications, and technology implementations from a technology risk perspective.

Experience reviewing third-party vendor security documentation, including security questionnaires, SOC reports, ISO certifications, or equivalent documentation.

Demonstrated experience performing threat modelling and technology risk analysis.

Strong understanding of technology governance, information security principles, and enterprise risk management.

Experience developing risk registers, risk assessments, executive reports, and mitigation recommendations.

Excellent stakeholder engagement and communication skills with the ability to work effectively with technical and business audiences.

Experience presenting findings to senior leadership, governance committees, or executive stakeholders.

Bachelor's degree in Computer Science, Information Technology, Information Security, Business, or a related discipline.

Professional certification such as CRISC, PMI-RMP, CRMP, CISSP, CISA, CGEIT, or an equivalent technology risk or security certification is highly desirable.

Preferred Qualifications

Experience supporting public sector, higher education, healthcare, or other highly regulated organizations.

Experience with technology governance frameworks such as COBIT, NIST Cybersecurity Framework, ISO 27001, or ITIL.

Knowledge of privacy legislation and technology risk considerations related to cloud services and Microsoft 365 environments.

Experience performing vendor risk assessments for cloud and Software-as-a-Service (SaaS) solutions.

If you have this expertise, and are able to work in Canada please submit your resume. While we thank all candidates in advance for their application, only those candidates who are shortlisted will be contacted.

ID# 5446