Senior Manager, IT Audit

Scotiabank•Dallas, TX

1d•Onsite

About The Position

As the 3rd Line of Defense, Internal Audit provides enterprise-wide, independent, and objective assurance over the design and operations of the Bank’s internal controls, risk management and governance processes. We are professionals who thrive in a challenging environment and work with management to find solutions to address control weaknesses. The Senior Audit Manager assists in leading internal audit activities for Data & AI in support of the Audit Department in executing on its global mandate, ensuring business strategies, plans and initiatives and all audit activities are conducted / executed / delivered in compliance with governing regulations, internal policies, and procedures. The Senior Audit Manager is a dynamic, innovative, and trusted advisor who uses data to deliver industry leading assurance and insights to keep the Bank and our customers safe.

Requirements

University/Post secondary degree in Business or equivalent.
Relevant Audit or business certifications (e.g., CISA, CRISC, CDMP, AAIA, CISSP, CISM).
At least 7+ years of relevant experience.
Working knowledge of the operations and regulatory environments for each unit as applicable.
Proven ability to work in high levels of ambiguity and in a rapidly changing environment.
Highly proficient at applying Scotiabank methodology and using risk-based auditing standards and practices.
Strong analytical skills in the use of data analytics or visualization tools.
Ability to execute and supervise multiple projects at any given time.
Highly developed interpersonal and communication skills (verbal and written).
Strong people management and coaching/development skills.
Curiosity mindset.

Responsibilities

Acts primarily as Officer in Charge (OIC) as a team member for assigned audits. May act as Audit Principal (AP) for low to medium complexity audits.
Works with other audit teams as required.
Carries out specific IT audit projects, specifically in relation to Data & AI with potential for involvement in ITGCs and Cybersecurity.
As OIC/AP, oversees audit planning, execution, and reporting.
Obtains a thorough understanding of the end-to- end business/unit/process and associated risks, develops an appropriate risk-based audit approach and schedules timing and resources.
Ensures audit results are gathered and determines the root cause of the problem.
Prepares and/or reviews audit results and findings for presentation to management.
Follows-up for corrective action/progress against any reported issues.
Ensures relevant information that impacts other audit function areas is shared.
Supports a client focused culture throughout their team to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.
Understands how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
Plans, documents, and seeks agreement in advance to the project approach and confirms conclusions upon completion in writing.
Ensures Scotiabank standards and the Institute of Internal Auditors (IIA) Code of Ethics are maintained in completion of all assignments.
Builds and maintains strong relationships with internal and external stakeholders and regulators as required.
Interacts and coordinates with other groups involved.
Completes timely review of workpapers, ensuring internal control weaknesses are clearly documented with recommendations addressing the root cause and are communicated timely to management.
Supports ongoing monitoring activities to stay abreast of changes (business/industry/regulatory), emerging risks, and themes or systemic issues that may impact the risk assessment of the audit universe and the audit plan.
Supports a high-performance environment and implements a people strategy that attracts, retains, develops, and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviors; communicating vision/values/business strategy; and managing succession and development planning for the team.
Meets Department training requirements.
Perform risk assessment of IT environments, including general IT controls and automated application controls within information technology systems and underlying IT infrastructure.
Evaluate data controls for design and operating effectiveness, including controls over data sourcing, transformation, aggregation, reporting, access, retention, reconciliation, issue remediation, and compliance with applicable internal policies and regulatory expectations.
Supports Data Audit methodology and center of excellence activities, including audit strategy, annual planning, standardized detailed audit procedures, and training materials.
Leads and supports Audit transformation through innovation, data analytics, automation, artificial intelligence, continuous monitoring, and continuous auditing approaches to detect potential issues on an ongoing basis