Audit Manager - Validation Centre of Excellence

CIBC•Toronto, ON

3d•Hybrid

About The Position

In this role, you will provide leadership in improving the overall control environment within CIBC. You will assist multi-skilled audit teams on large and/or complex regulatory and non-regulatory remediation validations across various CIBC business lines, with a focus on the Technology portfolio. As an Audit Manager, you are expected to have expertise in application development, security, access, and data-related controls in in-house and outsourced application environments. You will design and execute quality audit steps to complete deficiency validations, and you will also provide an independent opinion on the design and effectiveness of management’s remediation, including an opinion on controls in accordance with industry best practices. You will build and maintain strong professional relationships with internal business partners within Internal Audit and across the three lines of defense. Additionally, the senior manager is responsible for ensuring activities are conducted to high standards of accuracy, rigor, and credibility, and according to regulations and industry standards.

Requirements

3+ years of experience in auditing practices and accounting principles and processes.
Strong knowledge with a focus on Technology and the related regulatory environment in Canada.
Certified IT professional with a current accreditation in any of the following: CRISC - Certified in Risk and Information Systems Control; CISA – Certified Information Systems Auditor; CISM – Certified Information Systems Manager; CISSP – Certified Information Systems Security Professional.
In-depth knowledge of COBIT.
Working knowledge of CCM (Cloud Controls Matrix), ITIL & ISO frameworks.
One or more Cloud certifications such as Azure Security Engineer.
Typically acquired through obtaining an auditing or accounting designation (e.g., CPA, CIA, ACCA), a business degree (e.g., MBA), in addition to business experience either in the banking or financial services industry or internal / external audit assurance and consulting services.
Critical thinking skills.
Collaboration skills.
Leadership skills.
Passion for people and building relationships.
Values trust, teamwork, and accountability.

Nice To Haves

Bachelor's degree in Information Security or Technology related field.

Responsibilities

Provide leadership in improving the overall control environment within CIBC.
Assist multi-skilled audit teams on large and/or complex regulatory and non-regulatory remediation validations across various CIBC business lines, with a focus on the Technology portfolio.
Design and execute quality audit steps to complete deficiency validations.
Provide an independent opinion on the design and effectiveness of management’s remediation, including an opinion on controls in accordance with industry best practices.
Build and maintain strong professional relationships with Internal business partners within Internal Audit and across the three lines of defense.
Ensure activities are conducted to high standards of accuracy, rigor, and credibility, and according to regulations and industry standards.
Work collaboratively with internal and external stakeholders to plan and execute remediation validation activities and effectively manage multiple activities at different stages to ensure completion within required timelines.
Communicate regularly on progress and issues to ensure timely execution of team deliverables and at a high level of quality and compliance with audit standards and regulatory requirements/expectations.
Drive the development of deficiency remediation closure memos where you objectively assess the adequacy of management remediation activities and their potential impact on the business and to the CIBC Group of Companies while presenting them in a clear, concise, and professional way.
Provide trusted and proactive advice to business partners as they progress through their remediation activities.
Partner closely with the business to ensure optimized progress on CIBC’s deficiency remediation and validation activities.
Demonstrate clear, concise, and influential written and verbal communication skills when reporting on the team's status.
Develop strong internal and external relationships through ongoing communication on progress of engagements and providing advice on risk, control, and regulatory matters.
Coach team members on their developmental needs and provide leadership during individual assignments as well as team opportunities.

Benefits

Competitive salary
Incentive pay
Banking benefits
Benefits program
Defined benefit pension plan
Employee share purchase plan
Vacation offering
Wellbeing support
MomentMakers, our social, points-based recognition program
Purpose Day; a paid day off dedicated for you to use to invest in your growth and development