Job Description

Choose a workplace that empowers your impact.

Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and experience. A place where you can personalize your employee journey to be -- and deliver -- your best.



We are a purpose-driven, dynamic and sustainable pension plan. An industry leading global investor with teams in Toronto to London, New York, Singapore, Sydney and other major cities across North America and Europe. We embody the values of our 600,000+ members, placing their best interests at the heart of everything we do.



Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work.



Don't just work anywhere -- come build tomorrow together with us.



Know someone at OMERS or Oxford Properties? Great! If you're referred, have them submit your name through Workday first. Then, watch for a unique link in your email to apply.



We are looking for a highly motivated Controls Specialist to join the Technology Risk team in the Data and Technology department in Toronto. Reporting to the Acting Director, Technology Risk & Governance, you will be responsible for the hands-on design and development of OMERS' comprehensive technology controls program, perform regulatory control testing, maintain technology controls in the system of record, and manage the end-to-end lifecycle of technology controls for solutions. You will work closely with IT subject matter experts, such as cybersecurity, application development, and enterprise architecture teams , to ensure we are focusing on the right technical controls and that systems meet critical non-functional requirements like security, availability, and auditability.



This is a hands-on role suited for someone with a solid foundation in IT general controls, audit processes, and technical risk management within regulated environments.

As a member of our team, you will be responsible for :

Technology control design and oversight, including supporting the assessment and operations of existing controls, identifying areas of improvement and implementing enhancements



Advis ing stakeholders on control design and mapping to referential standards and frameworks



Maintain ing and updat ing control documentation



Collaborat ing with the Technology Risk team to define acceptable risk levels across operations as well as ensure adherence to the Risk Management framework, standards and policies



Manag ing AzureDevOps and ServiceNow workflows for control approvals, evidence collection, and technology risk management



Provid ing regular updates to senior management on control performance (i.e., KPIs) and contribute to leadership/board reporting materials through strong storytelling



Supporting regular IT risk assessments by identifying key risks, evaluating control coverage, and escalating areas of concern



Collaborating with IT operations, infrastructure, and development teams to understand system dependencies and risk exposure



S tay ing current on evolving technical risk and control practices, and bring ing forward innovative ideas

To succeed in this role, you have:

3-5 years of hands-on experience in IT controls, risk management, IT audit in a regulated industry



Solid understanding of IT general controls, cybersecurity contr ol s, and non-functional system requirements



Experience with GRC tools (e.g., ServiceNow)



S trong documentation and communication skills, especially in explaining technical controls to both technical and non-technical audiences



Previous exposure to an agile working environment



Hands-on operational experience in IT infrastructure, application support, or systems administration is strongly preferred



Certifications such as CISA, CRISC, CISSP, or ITIL are considered an asset



We believe that time together in the office is important for OMERS and Oxford, the strength of our employees, and the work we do for our pension members. In delivering on our pension promise, keeping us connected to our work and each other, our flexible hybrid work guideline requires teams to come in to the office 4 days per week.



As one of Canada's largest defined benefit pension plans, our people-first culture is at its best when our workforce reflects the communities where we live and work -- and the members we proudly serve.



From hire to retire, we are an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our Purpose@Work committee and employee recognition programs.