Business Continuity & Risk Analyst

Company: CGL 
Department: Enterprise Risk Management
Employment Type: Regular Full-Time 
Work Model: Remote (in office once a quarter)
Language: English is required, French is an asset.
Referral Award: No

The Opportunity:

We are a leading Canadian financial services co-operative committed to being a catalyst for a sustainable and resilient society and our team is essential to deliver on this strategy. That’s why we prioritize our people, to ensure we provide a strong culture and development opportunities which enables our team to thrive and to live our purpose. The best part is that you will work with people that care passionately about you, our clients, and our communities.

Our national Finance team aspires to create, enhance, and protect value for our organization and its stakeholders. Our knowledgeable team educates and influences the organization to make well-informed, risk-based decisions. We think innovatively and strategically to solve business problems and strive to move our business forward with practical, integrated processes and tools that ensure organizational success. 

The Business Continuity & Risk Analyst plays a critical role in supporting Enterprise Risk Management (ERM) initiatives and ensuring regulatory compliance. This position is integral to organizational resilience, proactively identifying and mitigating potential risks to maintain seamless operations during disruptions. The analyst will evaluate vulnerabilities across physical, digital, and operational domains, developing comprehensive contingency plans and alternative strategies.

Key responsibilities include conducting risk assessments, collaborating with stakeholders, and implementing strategies to strengthen risk management practices. Additionally, this role promotes a culture of preparedness by continuously refining plans based on lessons learned and adapting to the ever-evolving risk landscape. Through their detailed analysis of threats and infrastructure vulnerabilities, the Business Continuity & Risk Analyst helps build a strong foundation for organizational resilience and continuity.

Following Certifications are an asset:

• Associate Business Continuity Professional (ABCP) certification or Certificate of the Business Continuity Institute (CBCI) or working toward these certifications.
• CRM (Canadian Risk Management) designation.
• Professional or Operational Risk Manager certification.
• CRISC (Certified in Risk and Information Systems Control) or CISA (Certified Information Systems Auditor) designation.
• CFCP (Certified Functional Continuity Professional) or equivalent.

How you will create impact:

• Meet with subject matter experts to share control objectives and request related controls.
• Map controls to the appropriate framework/ standards; support management in updating the mapping if needed.
• Draft and contribute to required program documentation such as: policies; standards; guidelines; and procedures.
• Draft and contribute to supporting documentation for communications, education and template materials required by the program, including training aids for new procedures; FAQ guides; checklists and other templates.
• Collect and record data on key operational risks from across the group of companies.
• Monitor organizational change and assess impact to existing processes, including alignment of responsibilities.
• Providing support to team members and functions within the team as required, e.g.:
  • Support for an area of expertise (such as IT risk and controls, third-party review, BCM alignment, etc.).
  • Risk event monitoring/ follow up.
  • Reporting processes (Dashboard, event reporting, etc.)

How you will succeed:

• You have an innovative mindset to improve operational efficiencies and ability to influence change, with a primary focus on client needs.  
• You use critical thinking skills to recognize assumptions, evaluate arguments, draw conclusions and proactively propose solutions.
• You have strong communication skills to clearly convey messages and explore diverse points of view. 
• You build trusting relationships and provide guidance to support the development of colleagues.

To join our team:

• You have 3-5 years of experiences in Operational Risk Management, Compliance, Incident Management, Business Continuity, or Information Risk Management including experience in Insurance or Financial Services industry.
• You have a college diploma in a related field.
• You have IT management frameworks (e.g. ITIL, COBIT, NIST) knowledge.
• Strong knowledge and understanding of business continuity and governance frameworks, strong knowledge of business continuity best practices and protocols and operational risk management.
• Experience gathering, documenting, and reviewing and challenging responses to risk control assessments.

What you need to know:

• Extended work hours, including evenings and weekends, will be required during major events. 
• This role deals with emergency response and incident management. As a result, sustained periods of high stress can be expected.
• You will be subject to a Background check as a condition of employment, in the event you are the successful candidate.