A career as a Director cyber and technology controls within the Integrated Risk Management team at National Bank means acting as a specialist in technology and cybersecurity control testing. This role allows you to have a direct impact on the organization’s resilience through your expertise in risk management, IT controls, and complex technology environments.

In this position, you help ensure that control testing, documentation, and follow‑up practices meet regulatory expectations, align with the Bank’s risk appetite, and evolve alongside changing technologies and business practices.

Your role

• Lead and perform technology control testing activities using a risk‑based approach, in accordance with established methodologies and timelines
• Design, document, and maintain clear, structured test plans, procedures, and results that meet regulatory expectations
• Identify control gaps, collaborate with stakeholders, and follow up on remediation action plans
• Work closely with cybersecurity, information technology, and risk management teams to ensure alignment and continuous improvement
• Prepare concise summary reports highlighting key findings, risks, and recommendations
• Contribute to the evolution of testing practices and the optimization of control processes across the enterprise

Your team

The Integrated Risk Management Vice‑Presidency is a proactive and collaborative team that is transforming the way the Bank manages risk. It plays a key role in strengthening the organization’s technology and cybersecurity resilience.

Within the Integrated Risk Management sector, you are part of a specialized team and report directly to the Senior Director, Enterprise Testing . The team stands out for its rigorous approach, strong collaboration, and ability to operate in complex and evolving environments. We aim to offer you maximum flexibility to support your quality of life, including a hybrid work environment and a flexible, adaptable schedule.

The Bank values continuous development and internal mobility. Our personalized training programs, based on on‑the‑job learning, help you master your profession and develop new areas of expertise. Tools such as the Data Academy, language training, the Harvard Learning Centre, as well as coaching and mentoring support, are available to you at all times.

Prerequisites

• Bachelor’s degree with approximately 10 to 12 years of relevant experience in risk management, internal audit, or cybersecurity
• Strong expertise in IT and cybersecurity control testing within complex environments
• Solid knowledge of cybersecurity frameworks and technology controls, such as NIST, ISO 27001, and IT general controls
• Experience coordinating or leading small teams
• Relevant professional certification (CISA, CISSP, CRISC), considered an asset