Senior Manager, IT Audit

Socket.dev; Toronto; Hybrid; CAD 130,000 - 140,000; Full time

Benefits offered by this job

Hybrid work environment

Profit sharing

RRSP matching

Benefits from day one

Generous paid time off

Job summary

Peoples Group seeks a Senior IT Audit Manager to lead risk-based technology audit coverage across its financial services technology landscape. You will partner with technology, risk and compliance stakeholders to identify control gaps, communicate risk clearly, and support timely remediation while maintaining independence.

The role spans planning to reporting, evaluating controls, managing staff, and advising on major technology initiatives. Hybrid work and competitive compensation are offered.

Qualifications

• 7+ years in IT audit or tech risk within financial services.
• Experience leading complex IT audits and managing multiple engagements.
• Knowledge of COBIT, NIST CSF, ISO27001, COSO, IIA Standards and the Three Lines model.

Responsibilities

• Lead risk-based IT audit engagements from planning to reporting.
• Evaluate design and operating effectiveness of IT controls across governance, cybersecurity, IAM, change management, cloud, and third-party risk.
• Supervise audit staff and coach junior team members.

Skills

IT audit leadership

Risk-based auditing

Stakeholder management

Data analytics

Regulatory knowledge

Tools

COBIT

NIST CSF

ISO 27001

COSO

IIA Standards

Job description

We are hiring for this position out of our Toronto, Vancouver and Calgary offices. Successful candidates who apply outside of these areas will be expected to relocate and reside in a location that is within a commutable distance.

About the role:

The Senior IT Audit Manager is responsible for leading independent, risk-based technology audit coverage across People's Bank's technology landscape. The role provides assurance over the effectiveness of technology governance, cybersecurity, infrastructure, applications, data, cloud, operational resilience, and third-party technology risk controls. This position works closely with senior technology, business, risk, and compliance stakeholders to identify control gaps, communicate risk clearly, and support timely remediation while maintaining Internal Audit independence and objectivity.

The role also acts as a subject matter resource for IT audit practices, technology risk management, cybersecurity controls, regulatory expectations, and emerging technology risks relevant to a regulated financial services environment.

About the day-to-day:

• Lead risk-based IT audit engagements from planning through reporting, including risk assessment, scope development, walkthroughs, control testing, issue validation, and final report preparation.
• Evaluate the design and operating effectiveness of controls across IT governance, cybersecurity, identity and access management, privileged access, change management, IT operations, application controls, infrastructure, cloud services, data management, disaster recovery, and third-party technology services.
• Manage audit execution to ensure work is completed on time, to required quality standards, and in accordance with Internal Audit methodology and professional standards.
• Supervise IT audit staff by reviewing audit documentation, providing coaching, and supporting technical and professional growth.
• Prepare clear, practical, and risk-focused audit observations that describe the condition, criteria, root cause, impact, risk rating, and management action required.
• Communicate audit results, emerging themes, and control issues to senior management in a concise and credible manner.
• Challenge management action plans to ensure they are appropriate, sustainable, and aligned to the level of technology risk identified.
• Monitor and validate remediation of IT audit issues, including closure testing and assessment of residual risk.
• Contribute to annual and ongoing audit planning by identifying technology risk trends, regulatory priorities, control themes, and areas of emerging risk.
• Apply data analytics, continuous auditing techniques, and technology-enabled testing approaches to improve audit insight, coverage, and efficiency.
• Provide advisory input on major technology initiatives, system implementations, process changes, and control enhancements while avoiding management decision-making responsibilities.

About the qualifications:

• 7+ years of progressive experience in IT audit, technology risk, cybersecurity, IT controls, or related assurance roles, preferably within a financial institution or regulated financial services environment.
• Demonstrated experience leading complex IT audits and managing multiple audit engagements, issues, and stakeholder relationships concurrently.
• Strong knowledge of technology risk and control frameworks, including COBIT, NIST Cybersecurity Framework, ISO 27001, COSO, IIA Standards, and the Three Lines model.
• Practical experience assessing IT general controls, application controls, automated controls, cybersecurity controls, identity and access management, change management, IT operations, disaster recovery, cloud controls, and third-party technology risk.
• Understanding of regulatory expectations applicable to financial institutions, with the ability to translate requirements into audit scope, testing procedures, findings, and recommendations.
• Experience preparing audit reports and presenting technology risk matters to senior management, audit leadership, and governance forums.
• Ability to exercise independent judgment, professional scepticism, and constructive challenge while maintaining strong business relationships.

About us:

Peoples Group is a trusted financial services company for the innovators at the forefront of Canada's economic future. With offices in Vancouver, Calgary and Toronto, we are driving change by working alongside challenger banks, fintechs, brokers, and merchants to foster a dynamic and competitive financial ecosystem.

Our culture is built on four core behaviors: Grit to Grow, Connect to Collaborate, Putting Clients First, and Owning the Outcome. We believe people do not simply choose a company to work for they choose a company that makes a positive impact in the lives of Canadians. Above all, we value people, build meaningful relationships, focus on individual strengths, and approach our work with passion.

About the work environment:

Peoples Group offers a flexible and hybrid work environment. In this role you will work a combination of in-office and remotely from home. Typically, you'll be working regular business hours, Monday to Friday between 8:00am and 4:30pm with flexibility around start/end times.

We offer:

• A hybrid work environment, enabling you to balance your personal and professional life seamlessly.

• Competitive salaries, profit sharing, RRSP matching and benefits from day one.

• Generous paid time off to help achieve a healthy work-life balance.

• A commitment to your well-being in five key areas: Financial, Physical, Social, Career, and Community.

Compensation:

The expected salary for this role is approximately $130,000.00 - $140,000.00 annually. Actual compensation may vary based on experience, skills, and qualifications.

NOTE: This job posting is for an existing vacancy. Peoples Group is an Equal Employment Opportunity employer. Please accept our utmost appreciation for your interest; however, only those applicants under consideration will be contacted.

We value and celebrate individuality while fostering an inclusive workplace for everyone. If there's any way we can support or accommodate you during the selection process, please don't hesitate to let us know.