Senior Manager, IT Audit

Scotiabank•Dallas, TX

12d•Onsite

About The Position

The Senior Audit Manager assists in leading internal audit activities for Data & AI in support of the Audit Department’s global mandate. The role helps ensure business strategies, plans, initiatives, and audit activities comply with applicable regulations, internal policies, and procedures. As part of the Bank’s third line of defense, Internal Audit provides independent, objective assurance over internal controls, risk management, and governance processes. The Senior Audit Manager uses data to deliver assurance and insights and works with management to address control weaknesses. The role primarily serves as Officer in Charge (OIC) on assigned audits and may act as Audit Principal (AP) for low- to medium-complexity audits. It covers Data & AI, with possible involvement in IT general controls and cybersecurity, and supports audit coverage across data risk, governance, management, and reporting processes. The position may lead or coach Audit Managers and Auditors on data audit planning, testing, workpaper documentation, and reporting. The position is based in a standard office environment in Dallas, Texas. Moderate travel for audit assignments is required, and non-standard hours are common, especially at quarter end. Deadlines and schedules may change frequently due to unforeseen events.

Requirements

University or post-secondary degree in Business or equivalent.
At least 7 years of relevant experience.
Working knowledge of the operations and regulatory environments of applicable business units.
Ability to work through ambiguity in a rapidly changing environment.
Proficiency in applying Scotiabank methodology and risk-based auditing standards and practices.
Strong analytical skills using data analytics or visualization tools.
Ability to execute and supervise multiple projects simultaneously.
Highly developed verbal and written interpersonal and communication skills.
Strong people management and coaching/development skills.
Curiosity mindset.

Nice To Haves

Relevant audit or business certifications, such as CISA, CRISC, CDMP, AAIA, CISSP, or CISM.

Responsibilities

Act as Officer in Charge on assigned audits and, where applicable, as Audit Principal for low- to medium-complexity audits.
Coordinate with other audit teams and groups involved in audit assignments.
Conduct IT audit projects, particularly related to Data & AI, with potential involvement in IT general controls and cybersecurity.
Oversee audit planning, execution, and reporting; understand business processes and associated risks; and develop risk-based audit approaches, schedules, and resource plans.
Gather audit results, determine root causes, prepare or review findings for management, follow up on corrective actions, and share information relevant to other audit areas.
Plan and document the project approach, seek agreement in advance, and confirm conclusions in writing upon completion.
Review workpapers promptly and ensure control weaknesses, root causes, and recommendations are clearly documented and communicated to management.
Assess IT environments, including general IT controls and automated application controls within systems and underlying infrastructure.
Evaluate the design and operating effectiveness of data controls, including controls over data sourcing, transformation, aggregation, reporting, access, retention, reconciliation, issue remediation, and compliance.
Support Data Audit methodology and center-of-excellence activities, including audit strategy, annual planning, standardized procedures, and training materials.
Support audit transformation through data analytics, automation, artificial intelligence, continuous monitoring, and continuous auditing to detect potential issues on an ongoing basis.
Monitor business, industry, and regulatory changes, emerging risks, and themes or systemic issues that could affect audit risk assessments and plans.
Build and maintain relationships with internal and external stakeholders and regulators as required.
Support a client-focused culture and consider the Bank’s risk appetite and risk culture in day-to-day activities and decisions.
Maintain Scotiabank standards and the Institute of Internal Auditors Code of Ethics in all assignments.
Support a high-performance, inclusive team environment; attract, retain, develop, and motivate team members; coach them; communicate strategy and values; and manage succession and development planning.
Meet Department training requirements.