Senior IT Risk & Controls Specialist

Closing Date (MM/DD/YYYY):

05/14/2026

Worker Type:

Permanent

Language(s) Required:

English

Term Duration (in months):

Salary Range (plus eligible to receive a performance based incentive, applicable to position) :

$92,310 - $124,890

Why FCC?

At FCC, we’re proud to be 100% invested in Canadian agriculture and food. As a federal Crown corporation, we provide financing, knowledge resources and business management software to over 103,000 customers nationwide.

Here’s what you can expect when you join our team:

• Competitive total rewards packages: market-aligned and performance-based salary and incentive programs, flexible and comprehensive group benefit and savings plans, and well-being support through benefits and wellness programs

• Purpose-driven work: We build strong relationships, share knowledge and support the people who feed the world

• Growth: Learning and development opportunities to help you thrive

• Hybrid work options

~

How you’ll make an impact

As a Senior IT Risk and Controls Specialist, you’ll play a key role in strengthening FCC’s IT risk management practices by helping teams understand risk, apply effective controls and continuously improve how we manage and report on risk across the organization.

You’ll be part of a collaborative risk and controls team that supports information management, cybersecurity and privacy outcomes. Working closely with IT delivery teams, business partners, and second- and third-line risk partners, you’ll help translate complex risk concepts into practical guidance, meaningful reporting, and effective control testing and monitoring.

If you enjoy working across teams, simplifying complexity and influencing how risk is managed in a fast‑changing IT environment, this could be the role for you.

What you’ll do

• Plan and execute design and operating effectiveness testing of IT, cybersecurity, privacy and information management controls
• Conduct process walkthroughs with control owners to understand end‑to‑end control execution
• Review, validate and assess control evidence to determine effectiveness and identify gaps
• Support ongoing control monitoring, including tracking issues, remediation progress and emerging risks
• Consolidate testing results and develop clear, risk‑based reporting and key control indicators
• Advise IT delivery teams and control owners on control design, documentation and remediation activities
• Coordinate and respond to second‑ and third‑line requests, including audits and reviews
• Contribute to the continuous improvement of control testing and monitoring practices

What you’ll bring to the team

Required qualifications:

• A bachelor’s degree in computer science, commerce, business administration or a related field
• Minimum five years of progressive experience in IT risk management, technology risk, audit or a related field (or an equivalent combination of education and experience)
• Advanced knowledge of IT risk management practices, methodologies, processes and emerging trends
• Solid understanding of IT general controls (ITGCs) and control design and effectiveness
• Proven experience providing risk guidance and advisory support to technology or delivery teams
• Experience supporting control testing, monitoring and risk reporting activities
• Risk management or related professional certification (or working toward one)

Preferred qualifications:

• Knowledge of agriculture lending or financial services environments
• Experience supporting learning and awareness programs related to IT risk, cybersecurity or privacy
• Familiarity with three lines of defence risk management models

Not sure you meet every requirement? We encourage you to apply anyway.