Senior Manager & Digital Risk DevOps

Ernst & Young Advisory Services Sdn Bhd; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

A leading global consulting firm in Toronto is seeking skilled professionals to design and implement IT risk and compliance frameworks. Key responsibilities include executing IT audits and engaging with clients to ensure compliance and security. Ideal candidates will have a Bachelor’s or Master’s degree, relevant certifications, and at least 3 years of experience in IT risk, audit, or data analytics. This role offers a competitive salary and a comprehensive benefits package including a bonus program and professional development opportunities.

Benefits

Discretionary bonus program

Comprehensive health coverage

Flexible work arrangements

Learning opportunities

Qualifications

• Minimum 3 years of experience in IT risk, audit, or compliance.
• Experience with process redesign, automation, or optimization.
• Willingness to travel up to 50% and work extended hours when required.

Responsibilities

• Design and optimize IT risk and compliance frameworks.
• Execute IT internal audits and compliance assessments.
• Engage directly with clients and leadership.

Skills

Internal controls readiness assessments

Data architecture

SQL

Data management

Data analytics

Python

Big Data Tools

Cloud Platforms

Education

Bachelor’s or Master’s degree in a relevant discipline

Professional certification (CISA, CISSP, CISM, CPA, CA)

Tools

Python

SQL

Hadoop

AWS

Azure

Job description

The opportunity

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Your key responsibilities

• Design, implement, and optimize IT risk, compliance, and control frameworks.
• Assess technology environments, IT processes, and controls, including remediation and control implementation.
• Execute IT internal audits and compliance assessments (e.g., NIST, NI 52-109, SOX 404), evaluating control design and operating effectiveness.
• Support IT General Controls, automated business controls, and Information Produced by the Entity (IPE).
• Apply data‑driven risk solutions across DevSecOps, data governance, data quality, data security, and data platforms.
• Use analytics and visualization tools to develop scalable insights and risk solutions.
• Support adoption of emerging technologies, including cloud platforms, automation, and Generative AI.
• Partner with Product, Engineering, Operations, and Audit teams to improve control environments through automation and process improvement.
• Establish appropriate risk and control frameworks for new products and business changes.
• Engage directly with clients and engagement leadership in both in‑person and virtual settings.

Skills and attributes for success

• Experience with internal controls readiness assessments and control implementation
• Proficiency in NI 52-109 and SOX standards
• Experience in data architecture, data management, data engineering, data science or data analytics
• Experience in building analytical queries and dashboards using SQL, noSQL, Python etc.
• Proficient in SQL and quantitative analysis, you can deep dive into large amounts of data, draw meaningful insights, dissect business issues and draw actionable conclusions
• Knowledge of tools in the following areas:
• Scripting and Programming (e.g., Python, SQL, R, Java, Scala, etc.)
• Big Data Tools (e.g., Hadoop, Hive, Pig, Impala, Mahout, etc.)
• Cloud Platforms (e.g., AWS, Azure, or Google Cloud)
• Ability to analyze complex processes to identify potential financial, operational, systems and compliance risks across major finance cycles
• Ability to assist management with the integration of security practices in the product development lifecycle (DevSecOps)
• Experience with identifying potential security risks in platform environments and developing strategies to mitigate them

Ideally, you’ll also have

• Experience managing IT audits, internal controls, or technical data initiatives.
• Experience with process redesign, automation, or optimization.
• Experience securing cloud‑based applications and services.

What we look for

• Bachelor’s or Master’s degree in a relevant discipline.
• Professional certification preferred (e.g., CISA, CISSP, CISM, CPA, CA).
• Minimum 3 years of relevant experience in IT risk, audit, data analytics, or compliance.
• Willingness to travel up to 50% and work extended hours when required.
• Successful candidates must be willing to work in excess of standard hours when necessary.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry
• Learning opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

Salary

• Toronto: $110, 000 to $160, 000

Are you ready to shape your future with confidence? Apply today.

To help create the best experience during the recruitment process, please describe any accommodations you may need.