Director, Internal Audit (Information Technology)

EQ Bank | Canada's Challenger Bank; Toronto; Hybrid; CAD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive discretionary bonus

Market leading RRSP match program

Medical, dental, vision, life, and-dis

Employee Share Purchase Plan

Maternity/Parental top-up

Generous vacation policy and personal

Virtual events

Career Development program

Job summary

EQ Bank, a leading Canadian challenger bank, seeks a Director of Internal Audit IT to lead risk assessment, control identification, testing, and reporting across IT audits with emphasis on Cyber Security and Artificial Intelligence. You will design audit coverage for new technology and cloud-based environments, ensuring alignment with regulatory expectations and Bank initiatives.

You will oversee end-to-end audit engagements, communicate findings to senior management, and support ongoing

Qualifications

• Post-secondary degree with IT designation required (e.g. CISA, CISSP).
• 10+ years’ proven experience in financial institution IT audit (senior manager or above).
• Knowledge of Data Analytics, and AI practices and controls is an asset.
• Expert knowledge of ITIL and NIST control frameworks.
• Proven experience auditing IT infrastructure, cyber and application environments.
• Knowledge of OSFI Cybersecurity expectations.
• Strong written and verbal communication; ability to explain complex topics simply.

Responsibilities

• Develop and implement end-to-end IT audit coverage for technology processes, cyber, and AI in a digital banking cloud environment.
• Execute audit engagements from planning, risk identification, testing, to reporting to the Chief Auditor.
• Maintain awareness of regulatory requirements and industry developments to ensure relevant, value-added audits.
• Follow up on management actions and report progress to the Chief Auditor.

Skills

IT audit leadership

Cyber security

AI controls

ITIL

NIST

Data analytics

Regulatory knowledge

Stakeholder management

Project auditing

Communication

Education

IT designation (CISA/CISSP)

Job description

Join a Challenger

At EQ, we're remaking banking so every Canadian gets ahead, every day. Serving nearly 4 million Canadians from coast to coast, we offer a wide variety of financial services from banking and lending, to trust and credit union solutions. We've been at this since 1970, challenging the conventions of traditional banking with smarter, faster, and more connected financial experiences. What's kept us moving? The people behind it all: challengers who ask better questions, push back on old assumptions, and look for a better way forward. If you're driven to help reshape how banking works for Canadians and the businesses that power our economy, this could be your next big opportunity. We can’t wait to get to know you!

Purpose of the Job

The Director, Internal Audit IT will be responsible for leading the risk assessment, control identification, documentation, testing, findings and recommendation process for various Information Technology audits across the Bank, with a focus on Cyber Security and Artificial Intelligence. The incumbent will also be responsible for developing and implementing audit coverage for new technology systems/applications in line with the Bank’s strategic initiatives. This may involve auditing of certain Bank projects. Notably, the role is expected to be provide expert-level knowledge of current financial services information technology control expectations with respect to the Bank’s IT Operations and Cyber Security practices for a mainly Digital Banking cloud-based environment.

The core parts of your role would be to:

Independently develops and implements audit coverage of IT Technology processes and develops effective coverage of new technology implemented by the Bank - 60 %

• Taking into account the Bank’s IT policies, established technology control frameworks (ITIL and NIST), and applicable regulatory expectations, the incumbent will create audit programs for the Bank’s technology processes which include:
• Technology applications which support the bank’s business lines including: retail and commercial lending, credit cards, Trust and Digital Banking deposit products.
• Technology infrastructure
• Cyber Security
• Cloud Technology
• Artificial Intelligence

1. • Responsible for executing the end-to-end audit engagement process: commences with the development of an audit plan, followed by identification of risks, assessment/testing of the adequacy of associated internal controls, and development of conclusions based on audit testing.
   • Draft audit reports at the conclusion of each audit for submission to the Chief Auditor
   • Maintain ongoing awareness of applicable regulatory requirements, and the Bank’s strategic initiatives and industry developments in order to ensure audit work is relevant and value-added. This may include monitoring or auditing large-scale technology projects.
   • Follow-up and report on adequacy of management actions to resolve audit findings and report progress to the Chief Auditor on an ongoing basis.

Risk Assessment -25%

• Maintain up-to-date knowledge of regulatory expectations, the Bank’s strategic initiatives, significant technology process changes, and industry developments related to the Bank’s technology practices. Incorporate into audit coverage as required.
• Provide consulting advice on Bank policies/projects related to Technology controls.
• Develop a Risk and Control assessment for each individual audit engagement to guide the development of each audit program.
• The position will be required to take into consideration the size and complexity of the Bank when conducting risk assessments and in developing audit observations as a result of audit testing.
• Maintains an awareness of key strategic technology projects initiated by management and identifies potential change management risks which may be associated with management initiatives.
• Effectively communicates risks to all levels, including Senior Management across the Bank, both verbally and orally, in a concise manner tailored to the audience level.

Relationship Management/Communication - 15%

• Maintain positive working relationships with Senior Management of Information Technology units and IT control functions to ensure effective communication flow throughout the audit engagement process; maintain ongoing awareness of Senior Management’s concerns and any emerging risks.
• Able to influence senior management with respect to acceptance of key findings and/recommendations.
• Keep the Chief Auditor informed of the status of key risks or findings identified during the audit.
• Commit to ongoing professional development by completing 40 training hours per year.
• Share knowledge of areas of expertise with other members of the Internal Audit team in order to provide cross-training.

Let’s Talk About You!

• Post-secondary degree with a specialised IT designation is required (e.g. CISA, CISSP)

• 10+ years’ proven experience in a financial institution information technology audit role (senior manager or above).
• Knowledge of Data Analytics, and Artificial Intelligence practices and controls is an asset.
• Expert knowledge of ITIL and NIST control frameworks.
• Proven experience of independently auditing IT infrastructure, cyber and application environments.
• Expert knowledge of applicable regulatory requirements; including OSFI Cybersecurity expectations.
• Strong level of previous experience auditing technology projects/strategic initiatives.
• Proven excellent written and verbal communication skills, ability to communicate with both a technical and non-technical audience. Ability to break down complex subject matter into concise points for purposes of communicating audit findings.
• Ability to influence and impact Senior Management with respect to accepting/implementing recommendations related to identified control issues.
• Excellent effective organizational, time management and project management abilities; including the ability to manage multiple priorities (and potentially other staff resources) within deadlines.
• Ability to work independently and perform under pressure and within tight time constraints.
• Consistently continues to develop/maintain broad knowledge and awareness of the financial industry, risk management practices and regulatory and/or policy changes.

What we offer [For full-time permanent roles]

Competitive discretionary bonus

Market leading RRSP match program

Medical, dental, vision, life, and disability benefits

Employee Share Purchase Plan

Maternity/Parental top-up while you care for your little one

Generous vacation policy and personal days

Virtual events to connect with your fellow colleagues

Professional development and comprehensive Career Development program

A fulfilling opportunity to join one of the top FinTechs and help create a new kind of banking experience

The incumbent will be working hybrid and in office time will be spent working from EQ Bank’s additional office space located at 2200-25 Ontario Street, Toronto, ON.

Equity, Diversity & Inclusion

EQ is committed to building an inclusive, accessible environment where every employee feels valued, respected, and supported. We believe our organization is stronger — and our people thrive — when we honour and celebrate diverse experiences, identities, and perspectives. We’re equally committed to supporting your growth, both professionally and personally.

We provide a barrier‑free recruitment process and work environment. If you require accommodations at any stage, we will work with you to ensure you can bring your best self to the process and beyond.

As part of our recruitment process, EQ uses AI to help screen, assess, and/or select applicants for this position. All AI-enabled outputs are reviewed and validated by our talent team. All candidates considered for hire must successfully complete a criminal background check and credit check. While we appreciate every application, an EQ recruiter will contact only those whose skills and experience most closely match the requirements of the role.

EQB Inc. (TSX: EQB) is the parent company of Equitable Bank, the country's seventh-largest Schedule I bank by assets, which operates EQ Bank, Canada's Challenger Bank. EQB Inc. serves nearly 4 million Canadians and manages approximately $150 billion in combined assets under management and administration.

To learn more, visit eqb.investorroom.com and eqbank.ca.