Risk Officer for Shadow IT

Job description

Position Description:

Job Description
We are looking for a professional to take on the role of Shadow IT Risk Officer, responsible for managing the risks associated with non-governed IT systems within the organization. This role includes maintaining an inventory of Shadow IT, facilitating risk assessments, ensuring data consistency, supporting stakeholders, and preparing management reports on related risks.

Your future duties and responsibilities:

Main Tasks
Shadow IT Portfolio Management:
Regularly update existing and new Shadow IT records, including risk levels, ownership, impacts, descriptions, and mitigation plans
Organize and support the annual review of all Shadow IT situations and associated risks
Risk Assessment Support:
Coordinate with stakeholders for the assessment and analysis of identified Shadow IT, including impact and mitigation
Manage the validation process for IT risk records related to Shadow IT
Ensure compliance with internal risk management processes
Centralize and challenge reported Shadow IT cases with relevant teams
Reporting:
Monitor KPIs related to Shadow IT (risk level, ownership, key contacts)
Produce risk reports and action plans for senior management, issuing alerts when necessary
Participate in risk committees to share inputs related to Shadow IT and associated risks (including risk registers and risk impact assessments)

Required qualifications to be successful in this role:

Technical Skills
Risk monitoring (ability to identify risks, escalate, and suggest remediation actions)
Risk analysis (capability to anticipate, analyze threats, and design risk scenarios) and risk judgment (ability to challenge, approve, and decide on new activities and projects)
Knowledge of internal audit methodologies and processes
Broad understanding of IT environments, processes, and systems
General understanding of cybersecurity concepts, risks, and frameworks
Familiarity with regulatory frameworks applicable to IT and cybersecurity
General knowledge of compliance processes and frameworks

Language Skills
English – Mastery
French – Practice (optional, but appreciated)

Soft Skills
Organizational skills
Teamwork and collaboration
Decision-making ability
Analytical and critical thinking
Attention to detail and rigor
Autonomy

Skills:

·  English
·  French

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.