Senior Audit Manager IT - US

Scotiabank•Dallas, TX

1d•Onsite

About The Position

As the 3rd Line of Defense, Internal Audit provides enterprise-wide, independent, and objective assurance over the design and operations of the Bank’s internal controls, risk management and governance processes. We are professionals who thrive in a challenging environment and work with management to find solutions to address control weaknesses. The Senior Audit Manager assists in leading internal audit activities for Cybersecurity and Infrastructure in support of the Audit Department in executing on its global mandate, ensuring business strategies, plans and initiatives and all audit activities are conducted / executed / delivered in compliance with governing regulations, internal policies, and procedures. The Senior Audit Manager is a dynamic, innovative, and trusted advisor who uses data to deliver industry leading assurance and insights to keep the Bank and our customers safe.

Requirements

University/Post secondary degree in Business or equivalent.
Relevant Audit or business certifications (e.g., CISA, CISSP, CISM).
At least 7+ years of relevant experience.
Working knowledge of the operations and regulatory environments for each unit as applicable.
Proven ability to work in high levels of ambiguity and in a rapidly changing environment.
Highly proficient at applying Scotiabank methodology and using risk-based auditing standards and practices.
Strong analytical skills in the use of data analytics or visualization tools.
Ability to execute and supervise multiple projects at any given time.
Highly developed interpersonal and communication skills (verbal and written).
Strong people management and coaching/development skills.
Curiosity mindset.

Responsibilities

Acts primarily as Officer in Charge (OIC) as a team member for assigned audits. May act as Audit Principal (AP) for low to medium complexity audits.
Lead risk-based audits related to Global Transaction Banking functions and operations including cash management (eg. Payments, liquidity, cash operations, etc) assessing control design, operational effectiveness, and regulatory compliance.
Identify key issues, provide clear recommendations, and partner with stakeholders to validate findings, strengthen controls, and validate remediation.
Works with other audit teams as required.
Carries out specific IT audit projects, specifically in relation to Information Security, IT Infrastructure, Networks, IT Applications, with potential for involvement in Data Governance and Cybersecurity.
As OIC/AP, oversees audit planning, execution, and reporting.
Obtains a thorough understanding of the end-to- end business/unit/process and associated risks, develops an appropriate risk-based audit approach and schedules timing and resources.
Ensures audit results are gathered and determines the root cause of the problem.
Prepares and/or reviews audit results and findings for presentation to management.
Follows-up for corrective action/progress against any reported issues.
Ensures relevant information that impacts other audit function areas is shared.
Supports a client focused culture throughout their team to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.
Understands how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
Assesses Operational Risk Events for significance / impact on the business and its risk profile.
Plans, documents, and seeks agreement in advance to the project approach and confirms conclusions upon completion in writing.
Ensures Scotiabank standards and the Institute of Internal Auditors (IIA) Code of Ethics are maintained in completion of all assignments.
Builds and maintains strong relationships with internal and external stakeholders and regulators as required.
Interacts and coordinates with other groups involved.
Completes timely review of workpapers, ensuring internal control weaknesses are clearly documented with recommendations addressing the root cause and are communicated timely to management.
Supports ongoing monitoring activities to stay abreast of changes (business/industry/regulatory), emerging risks, and themes or systemic issues that may impact the risk assessment of the audit universe and the audit plan.
Supports a high-performance environment and implements a people strategy that attracts, retains, develops, and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviors; communicating vision/values/business strategy; and managing succession and development planning for the team.
Meets Department training requirements.
Perform risk assessment of IT environments, including general IT controls and automated application controls within information technology systems and underlying IT infrastructure.
Evaluate technical controls including but not limited to cybersecurity, disaster recovery, digital, privacy, and cloud security for design and operating effectiveness.