IT GRC Coordinator

Why FirstOntario?

• Competitive compensation packages
• Top-tier health and wellness benefits, including comprehensive benefits packages, a yearly health spending account and personal spending account
• Enhanced mental health benefits through SunLife and TELUS Health
• Flex-work environment
• Company-wide Employee Volunteer program (Blue Wave Program)
• Employee and Family Assistance Program

Job Overview

The IT GRC Coordinator supports the organization's Governance, Risk Management, and Compliance (GRC) activities. This is a supportive role that assists with maintaining IT policies, tracking IT compliance activities, and supporting IT risk management practices, with a focus on FSRA IT Risk Management Guidance. The position collaborates with internal teams such as IT, Risk, Internal Audit, and Legal to help ensure regulatory and internal requirements are met.

Role

• Support the maintenance and updating of IT policies, standards, and procedures in alignment with regulatory requirements and internal guidelines.
• Assist with IT risk assessments by gathering information, documenting risks, and maintaining risk registers.
• Assist in tracking remediation actions and follow up with stakeholders on assigned risk or compliance activities.
• Monitor and document compliance activities and provide status updates to senior GRC or management staff.
• Support the testing and monitoring of information security control effectiveness to strengthen IT compliance and mitigate IT risk.
• Support internal audits, reviews, and assessments by collecting evidence and maintaining documentation.
• Help coordinate and document compliance reviews to ensure policies and procedures are being followed.
• Assist in preparing awareness materials and supporting training activities related to IT policies and compliance expectations.
• Maintain GRC documentation, logs, and records to support audits, examinations, and internal reviews.
• Escalate identified issues, gaps, or risks to senior team members as appropriate.
• Perform additional duties as required.

Required Skills

• University degree/College diploma related to Information Technology or Risk and Compliance
• Two (2) years of experience within an IT or a GRC related field (within the financial sector preferred)
• Working knowledge of ISO 27001 is considered an asset
• Familiarity of other standards and frameworks (e.g., PCI DSS, NIST CSF, SOC 2) considered beneficial and supported through ongoing development. Applied basic JavaScript skills is beneficial
• Possess exceptional analytical skills and the curiosity to solve complex problems.
• Be approachable with excellent interpersonal, written, and verbal communication skills
• Be aware of and mitigate enterprise risk factors and ensure compliance with applicable regulations, legislation and FirstOntario policies and procedures

This posting is for an existing vacancy.

Salary Range: $53,122 to $73,042 annually.

Compensation for this role reflects a combination of skills, experience, and internal equity. Those whose experience more closely aligns the role's requirements may be placed higher within the salary range. You will learn more about FirstOntario Credit Union's total rewards package during the interview process.

Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know.