Analyst, Technology Risk and Controls

About the Role: Analyst, Technology Risk and Controls

As an Analyst, Technology Risk and Controls, you will design and implement automated solutions to support governance, risk, and compliance objectives at Canada Life. This role uniquely combines software engineering expertise with critical security and compliance requirements, emphasizing automation, integration, and scalability across all enterprise systems.

What You Will Do:

Automation & Orchestration

• Develop scripts and workflows to automate compliance evidence generation, risk assessments, and reporting.
• Implement Compliance-as-Code (CaC) integrated with GRC platforms and various technology controls.

API Integration

• Build and maintain integrations between GRC platforms and enterprise security controls (e.g., IAM, SIEM, XDR, WAF) using RESTful APIs.
• Create connectors for seamless data exchange between GRC tools and cloud environments (AWS, Azure).

CI/CD Enablement

• Integrate Policy-as-Code (PaC) into CI/CD pipelines to enforce security and compliance standards in software delivery.
• Automate compliance checks during crucial build and deployment stages.

Scripting & Development

• Develop robust automation scripts using PowerShell, Python, or other similar programming languages.
• Build custom modules and plugins tailored for GRC platforms to enhance functionality.

Agentic AI

• Design and implement innovative AI-driven agents to significantly enhance and streamline compliance automation workflows.

Monitoring & Reporting

• Develop comprehensive dashboards and automated reporting mechanisms for monitoring compliance posture and key risk metrics.

Collaboration

• Work closely and collaboratively with InfoSec, DevOps, and IT teams to embed governance and compliance seamlessly into technical workflows.

What You Will Bring:

Education: Bachelor’s degree in Computer Science or Software Engineering.

Technical Skills:

• Strong programming skills (Python, Java).
• Extensive experience with API development and integration.
• Familiarity with automation tools such as Ansible and Terraform.
• Knowledge of CI/CD pipelines, including Jenkins, GitLab Actions, and Azure DevOps.

Security Knowledge:

• Solid understanding of industry frameworks such as ISO 27001 and SOC 2.

Other:

• Strong analytical and problem-solving skills.
• Excellent documentation and communication abilities.

Preferred Qualifications:

• Experience with leading cloud platforms (AWS, Azure).
• Experience with GRC platforms (e.g., ServiceNow GRC).
• Familiarity with DevSecOps practices.
• Knowledge of OSCAL, SCAP, OVAL, XCCDF formats.
• Familiarity with AI LLMs and Agentic AI (e.g., Copilot, GitLab Duo, Claude, OpenAI).

Grow with Canada Life:

Canada Life is united by a shared purpose to improve the financial, physical, and mental well-being of Canadians. The company is trusted by 1 in 3 Canadians and actively contributes to the strength of communities nationwide. Canada Life is committed to supporting its employees through every career stage, offering numerous benefits and opportunities for growth.

Key skills/competency

• GRC Engineering
• Automation & Orchestration
• API Development & Integration
• CI/CD Pipeline Management
• Scripting (Python, PowerShell)
• Security Frameworks (ISO 27001, SOC 2)
• Cloud Platform Security (AWS, Azure)
• DevSecOps Practices
• Risk Assessment & Reporting
• Agentic AI Solutions