Information Technology Audit Manager

Sun Life•Toronto, ON

1d•CA$60,000 - CA$97,000•Hybrid

About The Position

The Information Technology (IT) Audit Manager is a role within IA that will report to the Director (IT Digital and Data), within Internal Audit. The incumbent will support the execution of complex technology-related audit engagements and assurance projects in North America. The role will also support the implementation of audit data analytics, integrated systems auditing, and digital-related reviews in the Internal Audit function, especially as it pertains to automating IT audit activity.

Requirements

Combined business and technology experience; risk and controls consulting experience in a Big 4 firm is highly preferred.
Technically proficient in internal auditing, governance, risk and controls, data analytics, technology and digital and fully conversant with the COSO framework of internal control.
Advanced data literacy and possesses digital dexterity or the ability and desire to exploit existing and emerging technologies for better outcomes. Demonstrates skills in the areas of innovation, adaptability, leadership and, stakeholder relationship management; and critical and strategic thinking.
Bachelor’s degree holder in Information Technology, Engineering, Accountancy, or related course with an auditing/accounting or IT audit designation (e.g., CPA, CIA, CISA); information security designations (CISSP, CISM) highly preferred.
At least 5 years of solid IT auditing and data analytics experience in a client-facing, matrix, project-based organization; typically gained through prior audit, advisory, consulting, or public accounting experience in a "Big Four" firm or other large organization
Manage audit projects to cover key risks and controls and produce meaningful audit reports that clearly articulate the position on risks, controls and related issues, while meeting Internal Audit’s operational targets related to budget, timeline and quality of execution.

Nice To Haves

risk and controls consulting experience in a Big 4 firm
information security designations (CISSP, CISM) highly preferred

Responsibilities

Supervises other audit managers or auditors assigned to projects according to department objectives and provides coaching to staff where possible to support personal and overall department skill enhancement.
Understand the company’s technology strategy, operations and regulatory environment to proactively identify areas of emerging and heightened risk related to technology that affect the company. Reach agreement with management about the risks arising from planning, implementation and operation of Information technology solutions within the Business Group being audited; develop risk management objectives and audit programs to evaluate these risks.
Assess technology projects, business applications and IT operations and their related support models to provide assurance that key risks are managed while introducing new capabilities for our customers.
Develop testing strategies and report on company initiatives related to systems product delivery, production support maintenance and asset and vulnerability management processes.
Develop and implement a strategy to gain ongoing assurance over information services through automated methods. Identify opportunities to automate testing using toolsets deployed internally (CAATs and analytical tools) or through the assessment of other monitoring/analytic tools available on the market.
Support assigned technology/data-related components of business group teams’ audits and projects.
Positively influence IT management teams on their risk and control decisions to ensure that the organization maintains a strong risk culture and control environment.
Act as a subject matter expert in information technology, digital and data analytics.
Define and propose changes for information services audit units, maintain record of risks, key activities, systems and processes for sub audit units. Draft and maintain coverage strategy for sub audit units. Provide recommendations and ideas into the development of the IS audit plan.
Liaise with the Corporate IT Infrastructure Audit team to ensure that key risks and controls are uniformly tested on a risk-informed basis and harmonize audit approach across multiple Business