TECH LEAD - GRC ENGINEERING

We are banking at another level. Choosing BDC as your employer means working in a healthy, inclusive, and skilled workplace that puts forward the best conditions to bring together unique teams where employees are empowered to act. It also means being at the centre of ambitious economic and financial projects to see further and to do things differently, to fuel the success of Canadian entrepreneurs. Choosing BDC as your employer also means: Flexible and competitive benefits , including an Employee Savings and Investment Plan where BDC matches part of your voluntary contributions, a Defined Benefit Pension Plan, a $750 wellness and health care spending account, to name a few    In addition to paid vacation each year, five personal days , sick days as necessary , and our offices are closed from December 25 to January 1 A hybrid work model that truly balances work and personal life Opportunities for learning , training and development , and much more...  Explore the BDC Way in our Culture Book POSITION OVERVIEW BDC is seeking a Tech Lead to join the Risk & Value Office squad in Montréal. This role combines technical leadership, risk expertise, and data-driven delivery to advance InfoSec’s ability to monitor and manage its risk landscape. The Tech Lead will guide the design and implementation of GRC engineering capabilities, ensure the quality and consistency of squad deliverables, and drive the adoption of scalable analytics, automation, and reporting solutions. Acting as a key advisor, the role also strengthens technology risk management practices and enables actionable, executive-level insights.   CHALLENGES TO BE MET Technical Leadership & Squad Enablement • Act as the tech lead for the Risk & Value Office squad, providing guidance on GRC engineering and risk management. • Review and challenge the quality of the squad deliverables to ensure alignment with InfoSec standards and executive expectations. • Coach and mentor squad members on GRC engineering practices and risk management concepts, fostering capability uplift and autonomy. • Drive adoption of best practices in data, automation, and secure development, ensuring consistency across initiatives. • Provide technical guidance in prioritization and backlog refinement, ensuring work is aligned with value, risk reduction, and strategic objectives.   Risk Management & Governance • Lead and contribute to the continuous improvement of the InfoSec technical risk management framework, ensuring strong integration with data-driven insights. • Oversee the identification, assessment, and monitoring of technology and cyber risks, leveraging metrics, analytics, and automation. • Ensure risk outputs, such as KRIs, control effectiveness and audit findings, are consistent, traceable, and defensible. • Provide expert guidance on risk posture, remediation strategies, and prioritization, to support management decision-making. • Lead or support key risk management initiatives, such as…