Director, Information Systems

Manulife • Waterloo, ON

1d • CA$113,260 - CA$210,340 • Hybrid

About The Position

The Director/Senior Director Technology Audit and Advisory Services is accountable for delivering high-quality, professional, cost-effective, value-added, risk-based internal audit services across Technology functions in North America, Global Wealth & Asset Management, Group Functions, and the Global Data Technology Office. The role reports to the AVP of North America Segment Technology, Audit Services.

The position leads technology audit delivery, including North America technology, infrastructure, and cybersecurity audits; application and infrastructure technology SOX work; audit planning and reporting; and assigned audit initiatives and process improvements. It contributes to audit strategy, improves audit practices through automation, data analytics, shared services, and other innovations, and produces reports to help senior technology management identify trends and improve risk and control practices.

The role plans and directs audits and special projects, supports annual audit planning, provides practical recommendations, monitors implementation of control recommendations, and contributes to Audit Committee and senior leadership reporting. It also leads and develops an audit team, manages stakeholder expectations, and builds effective relationships with technology and information risk leaders across the company.

Requirements

• Exceptional communication judgment and clear, succinct verbal and written communication; active listening and consideration of differing perspectives.
• Confident presentation and facilitation skills, and strong interpersonal and leadership skills for working with senior management.
• Ability to understand business processes and risks quickly, identify key controls, analyze complex situations, reach sound conclusions, make practical value-added recommendations, and influence management to act on them.
• In-depth knowledge of audit methodologies, project management, system development methodologies including Agile, control frameworks, risk management practices, and regulatory requirements.
• Strong understanding of how technology supports business strategies, current technology and cybersecurity trends, best practices, and industry standards.
• Excellent working knowledge of risks affecting financial institutions and the insurance industry.
• Experience working effectively with external auditors on statutory audit, SOX, and SOC 1 and 2 engagements, and helping technology management understand their impacts.
• Results-oriented approach, focus on quality and value, ability to balance priorities and projects, attention to detail, and ability to retain focus on significant risks.
• Flexibility, organization, and ability to oversee multiple projects concurrently.
• Excellent influencing, relationship-building, and negotiation skills; professional presence and ability to navigate a matrix environment and influence across functions and management levels.
• Ability to work effectively in diverse environments and cultures across multiple office locations.
• Ability to identify opportunities to use data analytics to improve audit coverage.
• Relevant post-secondary education or equivalent experience, plus a recognized auditing designation or certification (such as CA, CPA, or CISA), a security designation or certification (such as CISSP, CISM, or CEH), or equivalent experience.
• Experience typically gained from 6–8+ years in relevant roles.
• Highest level of integrity and strong ethical principles.

Nice To Haves

• Previous people management experience and ability to lead and motivate a team of professionals in a new and rapidly changing environment while delivering timely, high-quality work.

Responsibilities

• Deliver audits of North America Segment Technology, infrastructure, and cybersecurity, including steady-state/key risk, program and project, business-integrated, and issue assessments.
• Deliver application and infrastructure technology SOX audit work and improve SOX processes through automation, data analytics, and shared services.
• Execute and continuously improve reporting processes, annual audit planning, resource management, and other processes for the North America segment technology audit team.
• Understand company strategy, operations, and regulatory requirements to identify emerging and heightened technology risks.
• Support development of an audit strategy aligned with business, technology, and Audit Services strategies, with coverage of key risks and regulatory expectations.
• Develop internal procedures and tools to drive consistent audit engagements and planning.
• Improve Technology SOX delivery and quality using data analytics, automation, shared services, and other innovations.
• Develop reports for senior technology management that identify trends and support continuous improvement of risks and controls.
• Contribute to Audit Services procedures, strategy, and direction, and continually improve audit and supporting processes using technology.
• Plan and direct audits and special audit projects to evaluate key controls and risk management practices, collaborate with management on risks and exposures, and deliver clear audit reports within budget, timeline, and quality targets.
• Deliver annual Technology Application and Infrastructure ITGC SOX work in collaboration with Technology Management, the SOX PMO, and external audit.
• Perform integrated and cross-functional audits with other Audit Services groups to report comprehensively on risks that could prevent management objectives from being achieved.
• Support development of the annual audit plan using risk management processes and collaborating with management and Audit Services leadership.
• Incorporate industry best practices and innovation into the audit approach, and manage resources efficiently and effectively.
• Provide timely recommendations that reduce risk and help management operate its business and make strategic and operational decisions.
• Monitor progress on control recommendations and report on implementation; assist with Audit Committee and senior leadership reports.
• Lead, develop, attract, and retain a high-caliber audit team, providing development, coaching, and training.
• Foster a creative, feedback-oriented culture of continuous improvement and strong audit practices.
• Develop team skills and engagement; manage talent, succession, and opportunities to rotate change expertise.
• Manage expectations concerning assurance and advisory work deadlines and deliverables.
• Provide stakeholders with overviews of audit work and commentary on the control environment, including trends and emerging issues.
• Collaborate with divisional and global stakeholders in Technology and Information Risk Management.
• Build credibility and professional relationships with stakeholders responsible for technology and information risk across the company.

Benefits

• Customizable health, dental, mental health, vision, short- and long-term disability, life, and AD&D insurance coverage.
• Adoption and surrogacy benefits.
• Wellness benefits and employee/family assistance plans.
• Retirement savings plans, including pension and a global share ownership plan with employer matching contributions.
• Financial education and counseling resources.
• Paid time off in Canada, including holidays, vacation, personal, and sick days.
• Statutory leaves of absence.
• Flexible work environment and support for well-being and inclusion.
• Incentive programs and performance-based incentive compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed