IT Audit Portfolio Manager
Full Time Permanent
Hybrid, Toronto
Job Description
Reporting to the Vice President of IT Audit, you will be responsible for effective management of the assigned IT audit portfolio which includes executing and reporting on multiple concurrent audit engagements resulting in improvements to the overall risk / control environment.
Responsibilities
- Contribute to Internal Audit Services annual planning process ensuring suitable coverage of information technology and cyber risk within the audit universe
- Lead information technology and cybersecurity process audits by developing and executing comprehensive audit plans that contain objectives, scope, deliverables, approach, resourcing, and schedule
- Conclude whether risks associated with information technology and cybersecurity processes are appropriately managed through existence of effective controls.
Ensure that audit conclusions and recommendations are properly supported by audit evidence and that the audit report content is clear, concise and supported by the audit work completed
- Prepare and discuss audit findings with client and audit senior management; identifying significant issues in a business context, working with audit clients to identify and recommend feasible solutions
- Collaborate with various audit teams on audits of significant projects by addressing various system development and implementation and cybersecurity risks including in-depth assessment of project solution and security architecture, security risk assessments ensuring adherence to enterprise standards and best practices
- Act as a risk / control subject matter expert (SME) for various IT infrastructure such as operating systems, databases, network devices, and cloud technologies
- Promote compliance to policies and procedures, standards, and guidelines
Qualifications
- 7+ years of IT audit or information technology experience with focus on cybersecurity or risk management
- University degree as well as CISA or CISSP and equivalent certifications are required. Other technology specific certifications are a plus
- Excellent working knowledge of audit, project management, and system development methodologies
- Experience in the assessment of threats and risks over IT and cybersecurity processes and systems
- Solid working knowledge and application of IT, cybersecurity, and service organization reporting control frameworks, specifically COBIT, NIST, and SOC (1 and 2)
- Knowledge of various industry regulations such as 52-109, PCI, PIPEDA, and GDPR
- Strong technical knowledge of various IT infrastructure and network components such as operating system (Windows, Linux), databases (Oracle), and network platforms
- Knowledgeable and experience in areas such as network security architecture, identity and access, threat and vulnerability, systems development security, data loss prevention, and endpoint protection
- Knowledge and experience of various security tools (IDAM, Vulnerability Assessment, EDR, SIEM etc.)
- Strong understanding of public cloud networking and network security controls on platforms such as Azure, GCP, AWS
- Excellent relationship management, time management, organization, planning, and process mapping skills
- Well-developed influential skills to resolve situations when there can be distinct differences of opinion between the client and the auditor
- Superior verbal and written communication skills sufficient to prepare and communicate audit reports dealing with facts and concepts for presentations to client executives and external auditors
- Committed to providing a customer focus and valued added service
Job 70508
IT Audit Portfolio Manager
Collaborate with various audit teams on audits of significant projects by addressing various system development and implementation and cybersecurity risks including in-depth assessment of project solution and security architecture, security risk assessments ensuring adherence to enterprise standards...
Manager, IT Internal Audit
Ability to prioritize competing responsibilities and multi-task efficiently without sacrificing work quality. Whether you're helping clients find new opportunities, developing new technology, or providing expert advice to internal partners, you will be doing work that matters in the world, in an env...
Manager IT Audit
Experience in analyzing information including its context and using professional judgement to draw the correct conclusions and ability to prioritize competing responsibilities and multi-task efficiently without sacrificing work quality. As the Manager, IT Internal Audit you will be working as part o...
IT Internal Audit Assistant Manager (Integrated Systems)
As the IT Internal Audit Assistant Manager, you will help in executing the risk-based audit plan with a focus on evaluating the integration of IT security controls with business systems and processes. Responsible for performing IT audit assignments as part of integrated business audits, focusing on ...
Manager, Audit, IT Digital, and Data Analytics
The role is a high-visibility and impact role with opportunities to partner with Senior Audit leadership, present to Global Audit teams and connect with analytics networks within Sun Life and in industry. Reporting to the Director, Internal Audit Data Analytics, this individual is responsible for de...
IT Internal Audit Assistant Manager (Technology Infrastructure Security)
As the IT Internal Audit Assistant Manager, you will help in executing the risk-based audit plan with a focus on evaluating the integration of IT security controls with business systems and processes. Responsible for performing IT audit assignments as part of integrated business audits, focusing on ...
Manager/Senior Manager, Technology Risk Services - IT Audit
Planning, managing, and completing IT Audit project tasks including liaising with client and KPMG teams; collecting, testing, and exploring information; documenting and evaluating IT processes, controls, policies, strategies; and performing detailed quality assurance review and feedback on the work ...
Risk & Internal Audit, Manager IT Audit
Upskill resources across the team on IT knowledge, expanding team capacity for IT audit and data analytics. Strong project management skills, with the ability to prioritize and manage multiple initiatives simultaneously using agile project management methodologies. The role focuses on evaluating Sho...
Manager - IT Internal Audit
Experience in advanced and emerging IT risk areas: Security and risk management, asset security, security architecture, communication and network security, identity and access management, security assessment and testing, security operations, software development security, and cloud security. This in...
Manager IT Audit
Ability to prioritize competing responsibilities and multi-task efficiently without sacrificing work quality. Whether you're helping clients find new opportunities, developing new technology, or providing expert advice to internal partners, you will be doing work that matters in the world, in an env...