Technology Audit and Compliance Manager

PwC•Toronto, ON

1d•CA$101,300 - CA$151,300

About The Position

Reporting to the Director of Operations within the Products & Technology (P&T) organization, this role serves as the central coordination point for technology audits on behalf of P&T and as liaison between the various internal and external audit teams and the P&T technology stakeholders. The role is responsible for understanding the scope, objectives and requirements of technology audits; coordinating P&T’s response to audit requests; and manage P&T’s responses to audit finding across various key technology domains including Quality Management System & Engineering (QMSE), IT Service Management (ITSM), Information Security & Privacy (ISP), and Web Technology & Cloud (WTC). This role ensures that audit engagements run smoothly, that audit requirements are aligned with risks and control objectives, that findings are accurately understood and addressed, and that management responses and remediation plans are timely, consistent, and well-evidenced. The Manager acts as a trusted liaison, aligning auditors, control owners, and technology stakeholders to strengthen the firm's overall control and compliance posture while minimizing audit support efforts and disruption to IT operations.

Requirements

Bachelor's degree in Computer Science, Information Systems, Information Security, Engineering, Business, or a related field
Experience in technology audit, IT risk, compliance, audit coordination, or control management.
Demonstrated experience coordinating with internal and external audit teams and managing the lifecycle of audit findings and responses.
Exposure to QMSE, ITSM, ISP, and WTC control environments.
QMSE: Familiarity with quality management systems and engineering process controls.
ITSM: Understanding of ITIL-based processes (incident, change, problem, configuration management).
ISP: Knowledge of information security and data privacy frameworks (ISO 27001, NIST CSF, GDPR/local privacy laws).
WTC: Awareness of web technologies, cloud platforms (AWS/Azure/GCP), and related control considerations.
Proficiency in GRC/audit management tools, evidence repositories, and tracking/reporting tools.
Strong organizational, project coordination, and time-management skills.
Excellent attention to detail and ability to draft clear, accurate written responses.
High integrity, discretion, diplomacy, and the ability to influence without authority.

Nice To Haves

Preferred/Required Certifications (one or more): CISA, CISM, CRISC, ITIL (Foundation/Intermediate), ISO 27001 (Foundation/Lead Implementer/Auditor)

Responsibilities

Serve as the primary point of contact between internal and external audit teams and technology stakeholders
Facilitate communication between auditors, control owners, and senior management
Coordinate audit schedules, scope discussions and process walkthroughs
Coordinate information requests and gather audit evidence
Report to leadership on audit progress
Lead the preparation, review, and submission of management responses to audit findings; ensure responses are accurate, evidence-backed, consistent, and submitted within agreed timelines
Develop and track remediation/action plans with control owners; monitor progress, validate closure of findings, and report status to leadership and auditors
Understand regulatory, certification and internal policy requirements, risks and control objectives and work with technology stakeholders to ensure controls meet relevant control objectives in a manner that optimizes control re-use and minimizes control activity efforts
Work with audit teams to optimize the use of audit evidence across audits and audit requirements to minimize audit response efforts
Standardize audit response templates and processes; improve evidence repositories and tracking tools to enhance audit readiness and reduce audit response efforts
Educate P&T staff and technology leaders on regulatory, certification and internal policy requirements