Senior IT Controls & Risk Manager

Groupe Dynamite; Mount Royal; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Performance-driven bonuses

Group retirement savings with employer

Flexible group insurance

Employee discount at Garage and Dynam

Exclusive private sample sales

Flexible vacation policy

Job summary

Groupe Dynamite is seeking a Senior Manager, Internal Controls to lead IT audits and ICFR testing in a public company environment. You will partner with the Director of Risk and Controls to provide independent assurance and support governance with IT risk oversight across SOX/52-109 frameworks.

You will plan and supervise audit work, coach analysts, and stay current on cloud, cybersecurity and ITGC risks, while helping shape annual audit plans and remediation tracking.

Qualifications

• 10+ years of IT internal controls experience in public accounting or public corporation.
• Bachelor's degree in Information Systems, Computer Science, Accounting, or related field.
• CPA and CISA certifications (or in progress); CIA and CRMA are assets.
• Bilingual French and English for daily communication with suppliers, employees, and stakeholders.

Responsibilities

• Plan and execute IT audits across access controls, change management, data security, network infrastructure, cloud environments, and business continuity/disaster recovery.
• Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls.
• Evaluate compliance with frameworks and regulations such as 52-109.
• Identify control gaps, security vulnerabilities, and process inefficiencies; document findings and remediation.
• Prepare clear, well-supported audit papers and reports for management and stakeholders.
• Supervise Internal Controls analysts, provide coaching and review work papers.
• Collaborate with IT and business units to understand systems, processes, and emerging risks.
• Track remediation of audit findings and verify corrective actions are implemented.
• Support external auditors as needed for ITGC and business controls.
• Stay current on emerging technology risks (cloud, AI, cybersecurity threats) and evolving regulatory requirements.
• Assist in risk assessments to help shape the annual audit plan.

Skills

IT controls

Audit reporting

Stakeholder communication

Bilingual French/English

Project management

Analytical thinking

Education

Bachelor's degree in IS/CS/Accounting

Tools

COBIT

SOX

Job description

Groupe Dynamite is seeking a Senior Manager, Internal Controls to lead IT audits and ICFR testing in a public company environment. You will partner with the Director of Risk and Controls to provide independent assurance and support governance with IT risk oversight across SOX/52-109 frameworks.

You will plan and supervise audit work, coach analysts, and stay current on cloud, cybersecurity and ITGC risks, while helping shape annual audit plans and remediation tracking.