Information Technology Risk Officer (Centris, QC)

Work Setup: Onsite

Location: Centris, QC

Schedule: UK TIME / PH MID-SHIFT SCHEDULE

Qualifications:

• Bachelor’s degree
• Strong understanding of risk management controls.
• At least 5 to 6 years of relevant work experience as a Risk Officer within the BPO/Shared Services industry.
• Excellent influencing and interpersonal skills.
• Proficient in Excel and PowerPoint.
• Demonstrates strong cross-cultural awareness and sensitivity.
• Prior experience in compliance and security-related activities is preferred.
• Strong analytical and creative problem-solving abilities, with the capability to identify alternatives when established procedures do not exist.
• Decisive, with the ability to consistently make sound judgments.
• Good understanding of and hands-on experience in operations and quality processes.

Roles and Responsibilities:

• Ensure that policies, processes, and standards are effectively established to identify, assess, measure, manage, and report risks, including systemic operational risks. This includes supporting the development and timely execution of robust remedial action plans.
• Provide oversight and ensure consistent implementation of control measures across multiple lines of business.
• Implement and monitor controls to ensure compliance with all contractual risk related requirements and maintain operational effectiveness.
• Investigate security incidents and support Ombuds related investigations, as needed.
• Build, develop and maintain strong working relationships with key stakeholders within customer organizations, particularly those involved in risk functions.
• Demonstrate commitment to continuous personal development and skill enhancement.
• Serve as a key point of reference for the risk management framework and business risk profile, providing guidance and decisions where appropriate.
• Enforce policies and procedures necessary to meet ISO 27001 requirements, as well as other applicable standards, for existing accounts and proposed solutions for new business.
• Maintain a strong understanding of data privacy regulations and controls, including PCI-DSS, SSAE and HIPAA.
• Actively participate in location crisis‑management forums to update delivery leaders on ongoing situations, stay informed on evolving events, and highlight relevant risks as needed
• Align with the strategic risk‑management and operational‑efficiency priorities defined by the Practice Head, ensuring cohesive execution at the location level.