Hybrid IT Audit Manager — Technology Risk & Controls SME

CIBC; Toronto; Hybride; CAD 95 000 - 135 000; Plein temps

Avantages offerts par ce poste

Hybrid work arrangement

Résumé du poste

CIBC is seeking an IT Audit professional to strengthen coverage of technology risk within our audit universe. You will serve as the SME for application development, security, access and data controls across in-house and outsourced environments.

In a role within Internal Audit, you will lead or participate in audits, evaluate design and effectiveness of controls, and ensure high-quality documentation and methodology.

Qualifications

• Broad and deep knowledge of IT risks in application development, security, access and data controls.
• Understanding of auditing practices to analyze client operations, assess risks and select audit approaches.
• Certified information systems auditor and security professional credentials.
• Familiarity with COBIT, ITIL, ISO and NIST frameworks and how they apply to technology controls.

Responsabilités

• Lead and contribute to IT application development, security, access and data risk coverage audits across groups.
• Train, guide and mentor auditors on IT risk requirements and best practices.
• Report trends in risk and control issues to Internal Audit leadership and senior management.
• Review contracts to ensure audit rights are included, when needed.
• Perform quality assurance reviews of IT applications audit work programs and provide guidance.

Connaissances

Analytical Thinking

Audit Methodology

Audit Processes

Business Relationships

Security Audit

Technical Leadership

Technology Use

Formation

CISA

CISSP

COBIT/ITIL/ISO/NIST knowledge

Outils

COBIT

ITIL

ISO

NIST Frameworks

Description du poste

CIBC is seeking an IT Audit professional to strengthen coverage of technology risk within our audit universe. You will serve as the SME for application development, security, access and data controls across in-house and outsourced environments.

In a role within Internal Audit, you will lead or participate in audits, evaluate design and effectiveness of controls, and ensure high-quality documentation and methodology.