Jobs at Ontario Securities Commission

Lead implementation of the Audit and Risk division's strategy, integrating internal audit, enterprise risk management and operational resilience. Oversee audit operations, develop integrated workplans and reporting, support ERM and governance, drive use of data analytics and GRC tools, manage stakeholder and Board reporting, supervise direct reports, and support continuous improvement, vendor oversight and modernization of risk and assurance practices.

Design, prototype and productionize cloud-based analytics and full‑stack applications, including foundational LLM-powered internal tools. Deliver MVPs in an Agile team, implement CI/CD and version control, prepare unstructured data for LLMs, collaborate with infrastructure teams, and establish development standards and evaluation benchmarks for model performance.

Provide strategic legal and governance advice to the OSC Board, Board Committees, and senior management; lead governance planning and meeting support; facilitate review and approval of regulatory initiatives; analyze complex governance and legal issues; design and deliver Board orientation and education; protect confidential privileged matters and collaborate with internal and external stakeholders to strengthen governance frameworks and oversight.

Provide technical leadership for CSA National systems: design and maintain target architecture, enforce standards, guide vendors and jurisdictions, modernize legacy systems, leverage cloud/Kubernetes/Spark and AI/automation, and mentor development teams to ensure reliable cross-jurisdictional solutions.

Provide securities law advice and review prospectuses, exempt market and continuous disclosure filings; conduct legal research and policy development; liaise with OSC divisions and market participants; manage multiple complex projects and contribute to regulatory initiatives.

Design, implement and enable secure, scalable cloud solutions by translating cloud strategy into landing zones, IaC templates, automation and CI/CD pipelines. Lead workload migrations, apply governance and security controls, improve observability and resiliency, and coach teams to adopt cloud standards and operational practices in a regulated environment.