Senior Audit Manager, Validation Centre of Excellence

CIBC•Toronto, ON

9d•Hybrid

About The Position

In this role you will provide leadership in improving the overall control environment within CIBC. You will lead multi-skilled audit teams on large and or complex regulatory and non-regulatory remediation validations across various CIBC business lines, with a focus on Technology portfolio. As the Senior Audit Manager, you are expected to have expertise in Third-party ongoing due diligence, Cybersecurity, Risk & Controls including governance, risk management operations and services across multiple lines of business. You will design and execute quality audit steps to complete deficiency validations and you will also provide an independent opinion on the design and effectiveness of management’s remediation including an opinion on controls in accordance with industry best practices. You will build and maintain strong professional relationships with Internal business partners within Internal Audit and across the three lines of defense. Additionally, the senior manager is responsible for ensuring activities are conducted to high standards of accuracy, rigor, and credibility, and according to regulations and industry standards. At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 2-3 days per week on-site, while other days will be remote.

Requirements

6+ years of experience in auditing practices and accounting principles and processes, and strong knowledge with a focus on Technology and the related regulatory environment in Canada.
Current accreditation in any of the following: CTPRP - Certified Third-party Risk Professional Certification; CRISC - Certified in Risk and Information Systems Control; CISA – Certified Information Systems Auditor; CISM – Certified Information Systems Manager; CISSP – Certified Information Systems Security Professional.
In-depth knowledge of COBIT.
Working knowledge of CCM (Cloud Controls Matrix), ITIL & ISO frameworks.
One or more Cloud certifications such as Azure Security Engineer.
Critical thinking skills.
Collaboration skills.
Ability to lead diverse, high performing teams.
Passion for developing and coaching people.
Ability to build trust through respect and authenticity.
Adherence to CIBC values – trust, teamwork and accountability.

Nice To Haves

A bachelor's degree in Information Security or Technology related field.

Responsibilities

Work collaboratively with internal and external stakeholders to plan and execute remediation validation activities and effectively manage multiple activities at different stages to ensure completion within required timelines.
Communicate regularly on progress and issues to ensure timely execution of team deliverables and at a high level of quality and compliance with audit standards and regulatory requirements/expectations.
Drive the development of deficiency remediation closure memos where you objectively assess the adequacy of management remediation activities and their potential impact on the business and to the CIBC Group of Companies while presenting them in a clear, concise and professional way.
Provide trusted and proactive advice to business partners as they progress through their remediation activities.
Partner closely with the business to ensure optimized progress on CIBCs deficiency remediation and validation activities.
Demonstrate clear, concise and influential written and verbal communication skills when reporting on the teams status.
Develop strong internal and external relationships through ongoing communication on progress of engagements and providing advice on risk, control and regulatory matters.
Coach your team members on their developmental needs and provide leadership during individual assignments as well as team opportunities

Benefits

Competitive salary
Incentive pay
Banking benefits
Benefits program
Defined benefit pension plan
Employee share purchase plan
Vacation offering
Wellbeing support
MomentMakers, our social, points-based recognition program
Spaces and technological toolkit to bring together great minds to create innovative solutions
Purpose Day; a paid day off dedicated for you to use to invest in your growth and development