Manager, Internal Controls

Groupe Dynamite, Inc Garage•Mount Royal, QC

16h

About The Position

Groupe Dynamite Inc. (GDI) is a Montréal-based, public company of integrated omni-channel brands, designing and distributing accessible, trend-forward fashion for women since 1975. Our mission of "Empowering YOU to be YOU, one outfit at a time" is brought to life through the GARAGE and DYNAMITE banners and represents the consumer-centric core of GDI's long-standing success as a leading retailer in North America. Today, GDI operates nearly 300 stores across Canada and the United States, as well as shoppable brand experiences at Garageclothing.com and Dynamiteclothing.com. We are seeking a detail-oriented Manager, Internal Controls for our Internal Controls Team. In this role, you will play a key part in our internal controls function and the testing for the ICFR Program for NI-52-109 compliance. You will support the Director of Risk and Controls to provide independent, objective assurance, and assist senior management in fulfilling their oversight role for risk management, internal control, and governance requirements from an IT perspective.

Requirements

10+ years of experience in IT internal controls within a mid- to large-sized public accounting firm (advisory) or public corporation;
Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field;
CPA certification and CISA certification (or in the process of obtaining); CIA and CRMA certifications are assets;
Commitment to excellence in the work that you do;
Attention to detail and strong professional skepticism;
Project management and time management across multiple concurrent audits;
Collaborative, with the ability to build relationships across technical and business teams;
Integrity and sound ethical judgment;
Solid understanding of IT general controls, SDLC, network/infrastructure concepts, and data security principles;
Familiarity with audit and control frameworks (COBIT, SOX, 52-109);
Strong analytical, problem-solving, and report-writing skills;
Ability to communicate technical findings clearly to non-technical stakeholders;
Bilingualism (French and English) is required for daily communication with suppliers, employees, and stakeholders, both within and outside of Quebec.

Nice To Haves

CIA and CRMA certifications are assets

Responsibilities

Plan and execute IT audits covering areas such as access controls, change management, data security, network infrastructure, cloud environments, and business continuity/disaster recovery;
Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls;
Evaluate compliance with frameworks and regulations such as 52-109;
Identify control gaps, security vulnerabilities, and process inefficiencies; document findings and recommend remediation;
Prepare clear, well-supported audit papers and reports for management and stakeholders;
Supervise Internal Controls analysts, provide coaching and review their work papers for business controls;
Collaborate with IT and business units to understand systems, processes, and emerging risks;
Track remediation of audit findings and verify corrective actions are implemented;
Support external auditors as needed for ITGC and business controls;
Stay current on emerging technology risks (e.g., cloud, AI, cybersecurity threats) and evolving regulatory requirements;
Assist in risk assessments to help shape the annual audit plan.