Location
Brookfield Place - 181 Bay StreetTechnology Services
Technology Services (TS) is responsible for delivering all enterprise infrastructure, applications and related end user technology services across all Brookfield business groups.
Brookfield Culture
Brookfield has a unique and dynamic culture. We seek team members who have a long-term focus and whose values align with our Attributes of a Brookfield Leader: Entrepreneurial, Collaborative and Disciplined. Brookfield is committed to the development of our people through challenging work assignments and exposure to diverse businesses.
Job Description
Department: Technology Services (IT Risk & Compliance)
Reports To: ITRC Manager
Role SummaryThe Senior Analyst is responsible for supporting internal and external audit, execute attestation, and governance activities within the IT Risk and Compliance program. This role supports audit readiness, performs control assessments, and collaborates with stakeholders to ensure compliance with internal policies and external requirements. The position focuses on delivering high-quality audit support and governance outcomes.
Key ResponsibilitiesSupport internal and external audits by coordinating requests, gathering evidence, and facilitating discussions
Execute control assessments and compliance reviews to evaluate design and operating effectiveness
Perform vendor risk assessments and review third-party control reports from an IT risk standpoint.
Validate control deficiencies and track remediation activities to completion
Collaborate with stakeholders to assess risk and provide recommendations for mitigation
Support the development and enhancement of reporting tools and dashboards
Contribute to governance processes related to cloud and security environments
Identify opportunities to improve processes and enhance efficiency
2–5 years of experience in IT risk, compliance, or audit functions
Experience supporting SOX and IT audits, ITGC testing within SOX compliance programs, and compliance assessments such as NIST and SWIFT Customer Security Programme (CSP)
Experience with cloud and security governance practices, including basic knowledge of cloud environments and experience supporting cloud audits and cloud risk assessments
Experience in IT vendor risk management or third-party assessments is a good to have
Experience working with governance and reporting tools such as AuditBoard, OneTrust is a plus.
Experience with SOC 1/SOC 2 report reviews and audit coordination
Basic knowledge of security vulnerability management practices and processes
Strong analytical and problem-solving skills
Understanding of IT control frameworks and compliance practices
Effective communication and collaboration skills
Ability to manage multiple priorities and deadlines
Knowledge of GRC platforms such as OneTrust and AuditBoard
Understanding of cloud environment risks and security vulnerability management concepts
Bachelor’s degree in information technology or accounting fields.
Professional certifications such as CISA and/or CISSP.
Experience with ServiceNow is an added advantage
Salary Range: $80,000 - $100,000 CAD
Position Opening Reason:
New PositionBrookfield is committed to maintaining a Positive Work Environment that is safe and respectful; our shared success depends on it. Accordingly, we do not tolerate workplace discrimination, violence or harassment.
Brookfield is committed to creating an accessible and inclusive organization. We are committed to providing barrier-free and accessible employment practices in compliance with the Accessibility for Ontarians with Disabilities Act. Should you require a Human Rights Code-protected accommodation through any stage of the recruitment process, please make them known when contacted and we will work with you to meet your needs.Skills Required
- 2-5 years of experience in IT risk, compliance, or audit functions
- Experience supporting SOX and IT audits, including ITGC testing
- Experience with compliance assessments such as NIST and SWIFT Customer Security Programme (CSP)
- Experience with cloud and security governance, including supporting cloud audits and cloud risk assessments
- Experience with SOC 1 and SOC 2 report reviews and audit coordination
- Basic knowledge of security vulnerability management practices and processes
- Experience in IT vendor risk management or third-party assessments
- Experience with governance and reporting tools such as AuditBoard and OneTrust
- Experience with ServiceNow
- Bachelor's degree in information technology or accounting (preferred)
- Professional certifications such as CISA and/or CISSP
Brookfield Asset Management Inc. Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Brookfield Asset Management Inc. and has not been reviewed or approved by Brookfield Asset Management Inc..
-
Retirement Support — The 401(k) provides a dollar-for-dollar company match on employee contributions with quick eligibility, auto-enrollment, auto-increase, and a year-end true-up. These features indicate strong employer commitment to long-term savings.
-
Healthcare Strength — Medical, dental, and vision coverage start on day one with multiple plan choices, plus wellness and mental-health resources and an EAP. Coverage breadth also includes domestic partner eligibility.
-
Affordable Benefits — A wellness incentive can reduce employee premiums across medical options. This points to intentional cost-management features that help keep out-of-pocket expenses in check.
Brookfield Asset Management Inc. Insights
What We Do
Brookfield is invested in long-life, high-quality assets and businesses around the world that form the backbone of the global economy. With over $850 billion in assets under management, and over 100 years’ experience as an owner and operator, we put our own capital to work in virtually every transaction, aligning interests with our partners and investors, and bringing the strengths of our operational expertise, global reach and large-scale capital to bear in everything we do. To learn more about our global businesses spanning renewable power and transition, infrastructure, real estate, private equity and credit, please visit www.brookfield.com. Phishing and Fraudulent Websites Warning Please be aware of the misuse of the Brookfield name and brand by individuals and groups fraudulently publishing fake websites and engaging in “phishing” scams that seek personal or confidential information from potential job candidates. This includes the posting of fake Brookfield job offers on LinkedIn and other career sites. You can find more details on what to look out for and how to report potentially fraudulent activity at https://www.brookfield.com/web-fraud-and-phishing-warning.
