We are seeking a highly motivated Technology Risk Manager to strengthen our global risk management capabilities. This role will be the guardian of our Technology Risk Management methodology and risk register, ensuring consistency, operational excellence, and value delivery across the enterprise.

The Manager will drive the continuous improvement of the Technology Risk Management framework, oversee the Third-Party Risk Management (Tech TPRM) process, and ensure timely delivery of monthly metrics and performance reports. Acting as the bridge between Risk Analysts and Cyber Advisory, this leader will manage ad hoc risk assessments and guide the team in identifying, evaluating, and reporting on technology risks.

You'll Have The Opportunity To

• Lead the Technology Risk Management team, ensuring effective collaboration and delivery.
• Evolve and manage the Technology Risk Management framework and methodology.
• Oversee and operationalize the technology risk register, ensuring risks are logged, assessed, tracked, and reported accurately.
• Drive the Tech TPRM process, ensuring vendor risk assessments and mitigation plans are consistently executed.
• Produce and present executive reports on residual IT risks and key risk indicators to senior stakeholders.
• Support ad hoc and project-based risk assessments, in close alignment with Cyber Advisory.
• Partner with IT/OT Compliance teams to align on action plans related to internal IT and OT controls.
• Establish and track monthly metrics to monitor program effectiveness and team performance.

YOU’LL THRIVE IN THIS ROLE IF YOU HAVE THE FOLLOWING SKILLS AND QUALITIES:

• Bachelor’s degree in Information Security, Risk Management, or a related field; advanced degree or certifications (e.g., CRISC, CISM, CISSP) are a strong asset.
• Solid experience in technology risk analysis (quantitative and qualitative).
• Strong knowledge of NIST Risk Management Framework (NIST RMF), ISO 27001 standards, and the FAIR methodology for quantitative risk analysis.
• Previous experience working closely with Advisory teams on risk, security, or compliance topics.
• Demonstrated ability to prepare and deliver executive-level reports on IT residual risks.
• Strong understanding of IT and OT internal controls, SOx compliance, and related governance frameworks.
• Proven leadership skills with the ability to guide and inspire a team of analysts.
• Excellent communication and interpersonal skills, with fluency in both English and French.
• Ability to work on-site 3 days per week at Montreal, Sherbrooke, or Valcourt.

ACKNOWLEDGING THE POWER OF DIVERSITY BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!

For this reason, we value diversity and we strive to always push each other forward to build an inclusive workplace where every employee feels like they belong, where they can grow and find meaning.

AT BRP, WHEN WE TALK ABOUT BENEFITS, WE GO ALL IN. Let’s start with a strong foundation — You want it, we have it:

• Annual bonus based on the company’s financial results
• Generous paid time away
• Pension plan
• Collective saving opportunities
• Industry leading healthcare fully paid by BRP

What About Some Feel Good Perks

• Flexible work schedule
• A summer schedule that varies by department and location
• Holiday season shutdown
• Educational resources
• Discount on BRP products

WELCOME TO BRP We’re a world leader in recreational vehicles and boats, creating innovative ways to move on snow, water, asphalt, dirt and even in the air. Headquartered in the Canadian town of Valcourt, Quebec, our company is rooted in a spirit of ingenuity and intense customer focus. Today, we operate manufacturing facilities in Canada, the United States, Mexico, Finland, Australia and Austria, with a workforce made up of close to 16,500 spirited people, all driven by the deeply held belief that at work, as with life itself, it’s not about the destination: It’s about the journey.