Audit Manager

Robertson & Company Ltd.; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

Robertson & Company Ltd. is seeking an experienced Audit Lead to support the development and execution of comprehensive audit programs. You will participate in cross-functional engagements, develop key artifacts, and ensure alignment with standards and timelines.

In this role you will sign off on walkthroughs, test scripts, and findings while guiding stakeholders and senior management. A strong background in cybersecurity, IT auditing, and risk management is essential for success.

Qualifications

• Bachelor's degree in information security, computer science, information systems, or related field.
• 7+ years of experience in cybersecurity, IT audit, risk management, or a combination, with at least 2+ years in a lead/manager role.
• Hands-on experience performing cyber/technology audits, including scoping, control testing, and audit reporting.
• Strong knowledge of common security controls and enterprise technology environments (networks, Windows/Linux, databases, cloud platforms, and SaaS).

Responsibilities

• Support the development and implementation of audit programs by contributing insights and assisting with planning activities.
• Participate in audit engagements across multiple areas, helping ensure audits are conducted in line with established standards and timelines.
• Execute the development of Audit Planning Memorandum (APM), Process Risk and Control Matrix (pRCM), Findings Grid and Audit Report.
• Complete L1 reviews/sign off on all audit activities (i.e. walkthroughs, test scripts, test results, grid, evidence uploads)
• Oversee/lead audits and/or execute the follow-up of findings arising from internal audits and regulatory reviews in accordance with policy
• Oversee/lead the ongoing audit communications and/or the reporting process with the stakeholders, senior management and external auditors for specific and/or overall Audit area
• Contribute to audit initiatives by providing input and assisting in the design and testing of solutions, as well as supporting implementation efforts.
• Lead / manage the integrated implementation of policies / processes / procedures / changes across multiple functional areas
• Act as the audit lead or audit advisor to management and respective teams for area of specialization. Report on emerging trends, identifying issues and opportunities and recommending action to senior management.
• Facilitate key discussions and provide thought leadership to executive audience

Skills

Cybersecurity

IT audit

Risk management

Lead management

Education

Bachelor's degree in information security

Bachelor's degree in Computer Science/Information Systems

Job description

JOB RESPONBILITIES:

• Support the development and implementation of audit programs by contributing insights and assisting with planning activities.
• Participate in audit engagements across multiple areas, helping ensure audits are conducted in line with established standards and timelines.
• Execute the development of Audit Planning Memorandum (APM), Process Risk and Control Matrix (pRCM), Findings Grid and Audit Report.
• Complete L1 reviews/sign off on all audit activities (i.e. walkthroughs, test scripts, test results, grid, evidence uploads)
• Oversee/lead audits and/or execute the follow-up of findings arising from internal audits and regulatory reviews in accordance with policy
• Oversee/lead the ongoing audit communications and/or the reporting process with the stakeholders, senior management and external auditors for specific and/or overall Audit area
• Contribute to audit initiatives by providing input and assisting in the design and testing of solutions, as well as supporting implementation efforts.
• Lead / manage the integrated implementation of policies / processes / procedures / changes across multiple functional areas
• Act as the audit lead or audit advisor to management and respective teams for area of specialization. Report on emerging trends, identifying issues and opportunities and recommending action to senior management.
• Facilitate key discussions and provide thought leadership to executive audience

SHAREHOLDER:

• Adhere to internal policies / procedures, enterprise frameworks and methodologies and applicable regulatory guidelines, contribute to the review of internal processes and activities and assist in identifying control weaknesses/failures, potential opportunities to improve operational efficiencies for their business area
• Actively manage relationships with business lines/ corporate and/or control functions and ensure alignment with enterprise and/or regulatory requirements
• Keep abreast of emerging issues, trends, and evolving regulatory requirements and assess potential impacts to the Bank
• Assess / identify key issues and elevate to appropriate levels and relevant stakeholders where required
• Maintain a culture of risk management and control, supported by effective processes and sound infrastructure in alignment with risk appetite
• Participate in cross-functional / enterprise initiatives as a subject matter expert helping to identify risk / provide guidance for complex situations

EMPLOYEE / TEAM:

• Provides thought leadership and/or industry knowledge for own area of expertise
• Encourage a positive work environment that promotes service to the business, quality, innovation and teamwork and ensure timely communication of issues/ points of interest
• Identify and recommend opportunities to enhance productivity, effectiveness and operational efficiency
• Work effectively as a team, supporting other members of the team in achieving business objectives and providing stakeholders services
• Participate in knowledge transfer within the team and business units.
• Contribute to the overall performance management process by providing coaching and input into team members' assessment on assigned audits

BREADTH & DEPTH:

• Work autonomously and accountable for acting as a lead within a specialized audit practice area and provide work direction to others
• Provide seasoned specialized knowledge, advice and/or guidance to various stakeholders and team members
• May lead and/or provide supervisory oversight to complex audits and ensure completion.
• Knowledge of external competition, industry and/or market trends in relation to own function / business
• Scope of role may have enterprise impact
• Undertake and complete a variety of complex audit projects and initiatives requiring specialist knowledge and/or the integration of cross functional processes within own area of expertise
• May oversee and/or independently perform concurrent multiple audits and related tasks from end to end
• Ability to process and handle confidential information with discretion.
• Generally, reports to a Senior Audit Group Manager or executive role

EXPERIENCE & EDUCATION:

Required Qualifications

• Bachelor's degree in information security, Computer Science, Information Systems, or related field.
• 7+ years of experience in cybersecurity, IT audit, risk management, or a combination, with at least 2+ years in a lead/manager role.
• Hands-on experience performing cyber/technology audits, including scoping, control testing, and audit reporting.
• Strong knowledge of common security controls and enterprise technology environments (networks, Windows/Linux, databases, cloud platforms, and SaaS).

Preferred Certifications

• Professional certifications such as CISA, CISSP, CISM, CRISC