Manager, Cyber Security & IT Risk Management

Overview

As the Manager, Cyber Security & IT Risk Management Audit, you will work as part of a high‑performing team to develop audit and data analytics skills, assess the effectiveness of internal controls, risk‑management practices, corporate governance processes, and fraud prevention and detection, and provide insights to the Audit Group in a global resourcing model.

Portfolio includes processes and technology developed and managed by various teams in the Technology & Operations function focused on Global Cyber Security and Technology Infrastructure.

Responsibilities

• Contribute to the execution of assurance engagements in the annual plan and formally document audit evidence in accordance with Internal Audit guidelines.
• Assess effectiveness of internal controls, risk‑management practices and governance processes to draw conclusions and complete audit programs.
• Develop and draft recommendations related to audit program conclusions for the Senior Manager, Internal Audit.
• Respond to stakeholder needs quickly and efficiently, building trusted relationships with Internal Audit peers.
• Co‑design, implement, and execute strategic initiatives to enhance continuous assurance and risk monitoring programs through data‑analytics and automation of technology and cybersecurity control testing.
• Execute basic analyses (e.g., descriptive) to discover patterns, insights, trends, and anomalies from data sets and visualization tools, creating simple visualisations using standard tools.
• Assume personal responsibility for specific, straightforward components of larger projects (audits) and develop personal and professional leadership skills and capabilities.

Must‑Have Qualifications

• 2-4 years of technology audit experience in a non‑leadership role OR 2-4 years of technology experience in a financial institution or technology company.
• Experience with technology and cybersecurity areas such as cloud computing, data loss prevention, data encryption, DevOps, networking technologies, and the ability to analyze information and use professional judgement to draw correct conclusions.
• Ability to prioritize competing responsibilities and multi‑task efficiently without sacrificing work quality.
• Experience in resolving differences of opinion demonstrated through use of challenge.
• Undergraduate degree in business, computer science, or a related area.
• Ability to learn and evaluate risk management of new and emerging technologies and processes.

Nice‑to‑Have Qualifications

• Knowledge of the Control Objectives for Information and Related Technology (COBIT) and NIST Cyber Security Framework (CSF).
• Designations such as CISA, CISSP, CPA, CA, CISM, CRISC, ITIL, MCSE, or CCNA.
• Experience as a coach, team captain, or mentor in a personal or work environment.

Benefits

• A comprehensive total rewards program including bonuses and flexible benefits and competitive compensation.
• Leaders who support development through coaching and managing opportunities.
• Work in a dynamic, collaborative, progressive, and high‑performing team.
• Opportunities to work on challenging projects and immerse in new technologies leveraged by the bank.

Job Skills

• Adaptability
• Auditing
• Controls testing
• Cybersecurity
• Detail‑oriented
• Information technology auditing
• Internal controls
• Interpersonal relationship management
• Multi‑level communication
• Results‑oriented