Information Technology Audit Manager

Sun Life; Toronto; Hybrid; CAD 60,000 - 97,000; Full time

Benefits offered by this job

Flexible benefits

Hybrid work model

Diversity and inclusion

Recognition as Best Workplace Ontario

Job summary

Sun Life is seeking a Senior IT Auditor within Internal Audit to lead audit programs focused on technology risk, data analytics and control frameworks. You will guide teams, partner with management on risk decisions and drive automation for assurance across IT domains.

The role supports a hybrid work model with a strong emphasis on collaboration, continuous improvement and delivering meaningful audit insights to safeguard clients and the business.

Qualifications

• Combination of business and technology experience; risk and controls consulting in Big 4 preferred.
• Knowledge of internal auditing, governance, risk and controls, data analytics and digital.
• Familiarity with COSO framework and information security designations preferred.
• Bachelor’s degree with auditing or IT audit designation; professional certifications valued.

Responsibilities

• Supervises other audit managers or auditors on projects and coaches staff.
• Identify risks from technology strategies, operations and regulatory environment.
• Assess IT projects, applications and operations to manage risks while enabling new capabilities.
• Develop testing strategies for system delivery, production support and asset management.
• Automate testing using CAATs or other analytics tools where possible.
• Support technology/data-related components of audits and projects.
• Influence IT management on risk and control decisions.
• Act as SME in IT, digital and data analytics.
• Define coverage strategy for sub audit units and maintain risk records.

Skills

Internal auditing

Data analytics

COSO framework

Governance, risk and controls

Stakeholder management

Leadership

Education

Bachelor’s degree in IT, Engineering, Accountancy, or related

Auditing/accounting or IT audit designation (CPA, CIA, CISA); CISSP/CISM preferred

Job description

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

• Supervises other audit managers or auditors assigned to projects according to department objectives and provides coaching to staff where possible to support personal and overall department skill enhancement.
• Understand the company’s technology strategy, operations and regulatory environment to proactively identify areas of emerging and heightened risk related to technology that affect the company. Reach agreement with management about the risks arising from planning, implementation and operation of Information technology solutions within the Business Group being audited; develop risk management objectives and audit programs to evaluate these risks.
• Assess technology projects, business applications and IT operations and their related support models to provide assurance that key risks are managed while introducing new capabilities for our customers.
• Develop testing strategies and report on company initiatives related to systems product delivery, production support maintenance and asset and vulnerability management processes.
• Develop and implement a strategy to gain ongoing assurance over information services through automated methods. Identify opportunities to automate testing using toolsets deployed internally (CAATs and analytical tools) or through the assessment of other monitoring/analytic tools available on the market.
• Support assigned technology/data-related components of business group teams’ audits and projects.
• Positively influence IT management teams on their risk and control decisions to ensure that the organization maintains a strong risk culture and control environment.
• Act as a subject matter expert in information technology, digital and data analytics.
• Define and propose changes for information services audit units, maintain record of risks, key activities, systems and processes for sub audit units. Draft and maintain coverage strategy for sub audit units. Provide recommendations and ideas into the development of the IS audit plan.
• Liaise with the Corporate IT Infrastructure Audit team to ensure that key risks and controls are uniformly tested on a risk-informed basis and harmonize audit approach across multiple Business

What will you do?

• Supervises other audit managers or auditors assigned to projects according to department objectives and provides coaching to staff where possible to support personal and overall department skill enhancement.
• Understand the company’s technology strategy, operations and regulatory environment to proactively identify areas of emerging and heightened risk related to technology that affect the company. Reach agreement with management about the risks arising from planning, implementation and operation of Information technology solutions within the Business Group being audited; develop risk management objectives and audit programs to evaluate these risks.
• Assess technology projects, business applications and IT operations and their related support models to provide assurance that key risks are managed while introducing new capabilities for our customers.
• Develop testing strategies and report on company initiatives related to systems product delivery, production support maintenance and asset and vulnerability management processes.
• Develop and implement a strategy to gain ongoing assurance over information services through automated methods. Identify opportunities to automate testing using toolsets deployed internally (CAATs and analytical tools) or through the assessment of other monitoring/analytic tools available on the market.
• Support assigned technology/data-related components of business group teams’ audits and projects.
• Positively influence IT management teams on their risk and control decisions to ensure that the organization maintains a strong risk culture and control environment.
• Act as a subject matter expert in information technology, digital and data analytics.
• Define and propose changes for information services audit units, maintain record of risks, key activities, systems and processes for sub audit units. Draft and maintain coverage strategy for sub audit units. Provide recommendations and ideas into the development of the IS audit plan.
• Liaise with the Corporate IT Infrastructure Audit team to ensure that key risks and controls are uniformly tested on a risk-informed basis and harmonize audit approach across multiple Business

What do you need to succeed?

• Combined business and technology experience; risk and controls consulting experience in a Big 4 firm is highly preferred.
• Technically proficient in internal auditing, governance, risk and controls, data analytics, technology and digital and fully conversant with the COSO framework of internal control.
• Advanced data literacy and possesses digital dexterity or the ability and desire to exploit existing and emerging technologies for better outcomes. Demonstrates skills in the areas of innovation, adaptability, leadership and, stakeholder relationship management; and critical and strategic thinking.
• Bachelor’s degree holder in Information Technology, Engineering, Accountancy, or related course with an auditing/accounting or IT audit designation (e.g., CPA, CIA, CISA); information security designations (CISSP, CISM) highly preferred.
• At least 5 years of solid IT auditing and data analytics experience in a client-facing, matrix, project-based organization; typically gained through prior audit, advisory, consulting, or public accounting experience in a \"Big Four\" firm or other large organization
• Manage audit projects to cover key risks and controls and produce meaningful audit reports that clearly articulate the position on risks, controls and related issues, while meeting Internal Audit’s operational targets related to budget, timeline and quality of execution.

What's in it for you?

• The opportunity to move along a variety of career paths with amazing networking potential
• Flexible Benefits from the day you join to meet the needs of you and your family
• We’re committed to creating an inclusive and respectful environment. Our goal is to make sure all our employees have the chance to live up to their full potential
• We’re honoured to be recognized as a 2025 Best Workplaces in Ontario by Great Place to Work® Canada
• We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®, for prioritizing employee well‑being, fostering a positive work culture, and achieving excellence in mental health

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [e-mail].

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

60,000/60 000 - 97,000/97 000

Job Category:

Internal Audit

Posting End Date:

04/10/2026