Audit Manager, IT & Cyber Security Audit

Scotiabank • Toronto, ON

44d • Onsite

About The Position

Contributes to the overall success of the IT & Cyber Security Audit in ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives. Ensures all activities conducted are in compliance with governing regulations, internal policies and procedures. As an Audit Manager you will participate in the execution of risk-based technology audits, across Cyber Security, Technology Infrastructure, Digital Banking, Cloud, and Architecture, of medium to high complexity to provide opinions on the effectiveness of controls to meet business objectives. In addition, you are expected to be knowledgeable in risks associated with systems development methodologies (Waterfall and Agile), automation and orchestration, IT service delivery, and outsourced IT services.

The incumbent will be required to work as part of a team that assesses the design and operational effectiveness of governance and internal controls relating to digital banking, cloud services, cyber security, data protection and management, outsourcing, technology infrastructure, and project management. Apart from the technical skills noted, the incumbent should be proficient at applying risk-based auditing standards, practices, techniques, processes, internal/external methodologies and regulatory guidelines to the performance and review of audits. The Bank’s Internal Audit Department plays a key role in the risk management process of the Bank.

Requirements

• 3-5 years of experience in information technology, information security, cyber security, IT risk, IT audit or a related field.
• Good knowledge of IT processes such as digital banking, software development, cloud engineering and operations, IT and cyber security.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team of professionals.
• Bachelor’s degree in information technology, computer science or equivalent required.
• One or more of the following certifications: CISA, CISM, CRISC, CRMA, CCSP or working towards achieving these.
• Good analytical skills and proficiency with Microsoft Word, Excel, and PowerPoint

Nice To Haves

• Some knowledge and experience with security assessment tools (e.g., exploit tools, vulnerability assessment) would be an added advantage.
• Working knowledge of primary Bank business areas (e.g., retail banking) would be an asset.

Responsibilities

• Execute risk-based information technology audits of moderate to high complexity and conclude whether risks are appropriately managed through the existence of effective control or other techniques.
• Follow the Audit Standard Guidelines of the Bank and specific application, project and operations audit methodologies.
• Ensure that audit conclusions and recommendations are properly supported by an orderly accumulation and analysis of documented audit evidence, and that the audit report content is clear, concise and supported by the audit work completed.
• Perform accountabilities with some supervision and provide audit management and audit client with regular status updates of the assignment. The incumbent is expected to seek and obtain direction, perspective and resources as required to complete the assigned audit on time and within budget.
• Prepare and discuss audit findings with clients; identifying significant issues in a business context, working with audit clients to identify and recommend feasible solutions.
• Establish and maintain positive relationship management with audit clients.
• Maintain information security competency through ongoing professional development and staying abreast of technical matters in the industry.
• Champions a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.

Benefits

• The opportunity to join a forward-thinking bank surrounded by a collaborative team of innovative thinkers.
• A rewarding career path with diverse opportunities for professional development.
• Internal development to support your growth and enhance your skills.
• An organization committed to making a difference in our communities– for you and our customers.
• We have an inclusive and collaborative working environment that encourages creativity, curiosity, and celebrates success!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level