Shape technology risk strategy. Strengthen governance. Protect the integrity of enterprise banking transformation.

The Role

At Capco, we're looking for an experienced Technology Risk & Governance Lead to play a pivotal role in a major Enterprise Technology Asset Management (ETAM) transformation for a leading Tier 1 Canadian financial institution.

This is a high-visibility opportunity to take ownership of technology risk and governance across five interconnected workstreams, ensuring that effective controls, regulatory compliance, and information security standards are embedded throughout the transformation.

You'll work at the intersection of technology, risk, and business transformation, partnering with senior stakeholders, solution architects, information security teams, and delivery partners to identify and address risks, strengthen control effectiveness, and support successful regulatory remediation.

Beyond maintaining governance frameworks, you'll help shape how technology risk is managed across the program, bringing clarity to complex challenges, providing objective assessment, and ensuring that emerging risks are addressed before they impact delivery.

We're looking for someone who combines deep technology risk expertise with strong stakeholder engagement and practical problem-solving skills. Someone who understands the realities of complex banking environments and can translate risk and regulatory expectations into effective, actionable controls.

What You’ll Do

Take ownership of technology risk and governance activities across five ETAM workstreams, ensuring risks are identified, assessed, monitored, and managed in alignment with enterprise policies, regulatory expectations, and established governance standards.

Oversee control design, testing, risk and control self-assessments, audit evidence management, and regulatory remediation activities, ensuring control gaps are documented, tracked, and effectively addressed.

Partner with solution architects, information security specialists, and technology delivery teams to ensure technology solutions and implementation activities align with information security standards, risk management policies, and established control requirements.

Establish effective governance reporting, risk escalation, issue management, and remediation tracking, providing senior stakeholders with clear visibility of risk exposure, control effectiveness, and outstanding actions.

Work closely with technology leaders, risk and compliance teams, and delivery partners to embed effective governance practices, provide objective risk assessments, and support informed decision-making throughout the transformation.

What We’re Looking For

8–12+ years of overall professional experience, including a minimum of 5 years in technology risk management, Governance, Risk & Compliance (GRC), or regulatory compliance.

A minimum of 3 years of experience supporting large financial institutions, with a strong understanding of banking technology risk, operational risk, first-line technology controls, and Canadian financial services regulatory expectations.

Demonstrated experience in technology risk assessments, control design and testing, risk and control self-assessments, audit evidence management, issue remediation, and regulatory compliance within complex technology environments.

Strong understanding of information security standards, enterprise technology governance, technology asset lifecycle risks, and regulatory remediation, with experience collaborating with solution architects and technology delivery teams.

Excellent analytical thinking, sound judgement, attention to detail, and communication skills, with the ability to assess complex risks, engage senior stakeholders, provide constructive feedback, and influence practical, risk-based decisions.

Bonus Points For

Previous experience supporting technology risk and governance initiatives within Tier 1 Canadian financial institutions, including enterprise technology asset management and asset lifecycle governance.