Senior Risk & Controls Testing Specialist

Job Overview

The Senior Risk & Controls Testing Specialist is a key contributor in Wawanesa’s second line Monitoring and Testing (M&T) team. Working under minimal supervision, this role is a senior subject matter resource who monitors, educates, and advises business team members handling first line of defense risk mitigation and regulatory compliance activities. The role also leads reviews of applicable laws, regulations, industry guidelines, internal policies and procedures, and best practices.

Job Responsibilities

• Leads the design and execution of complex, risk‑based test procedures, including criteria development, evidence assessment, and documentation of processes and controls.
• Works with M&T data analytics team members and other relevant stakeholders to champion the use of data analytics and technology, where appropriate to increase testing coverage, effectiveness, and efficiency
• Mentors other M&T team members and supervises work performed by others
• Executes testing across a broad range of enterprise risk types, including regulatory compliance, financial controls, technology/cybersecurity, operational risk, and other areas aligned to the expanded second  line mandate.
• Collaborates with internal team members and cross-functional stakeholders effectively to promote the value proposition of M&T activities in helping different key business stakeholders to achieve Wawanesa’s strategic goals
• Leads stakeholder interviews, reviews documents, and prepares comprehensive working papers with minimum supervision
• Synthesizes testing results reported from first line quality assurance functions to evaluate risk management effectiveness and regulatory compliance
• Develops and maintains right-sized internal documentation with high quality
• Identifies and documents instances of heightened or unmitigated risk exposures, non-compliance and potential regulatory issues, supporting enterprise risk and compliance reporting processes
• Presents testing results to stakeholders, including Senior Management, through impactful reporting that contains practical, value-added recommendations to strengthen internal controls and enhance risk management; subsequently follows up on related Management Action Plans
• Challenges the status quo and pursues continuous improvement opportunities
• Maintains a high degree of professionalism in handling confidential and sensitive information
• Performs other duties as required

Qualifications

• Minimum 5 years of progressive experience in regulatory compliance, enterprise risk, internal audit, or external audit, with demonstrated experience conducting control testing. (Chartered Professional Accountant (CPA), Certified Information System Auditor (CISA), and/or Certified Internal Auditor (CIA) designation (or equivalent) is required
• Post-secondary education with a focus on business, management information systems, accounting, finance, risk management and insurance, or equivalence
• Experience testing across multiple enterprise risk categories (e.g., financial controls, technology/cybersecurity, operational risk) is an asset
• Exceptional ability to manage multiple priorities with minimal supervision
• Excellent planning, organizing, and time management skills
• Strong interpersonal, verbal, and written communication skills, with the ability to communicate at the appropriate level for the audience and present risk and controls information and reasoning in a convincing manner
• Excellent attention to detail, analytical and problem-solving skills, with the ability to apply critical thinking to principle-based laws and regulations and to influence key relationships
• Experience in life / property & casualty insurance or other federally regulated financial institutions is considered an asset
• Experience with governance, risk, and compliance tools such as Ethidex, Archer, and MetricStream is considered an asset
• Holder of, or actively pursuing, the CIP designation is considered an asset
• Bilingualism (French and English) is considered an asset