We are hiring for this position out of our Toronto, Vancouver and Calgary offices. Successful candidates who apply outside of these areas will be expected to relocate and reside in a location that is within a commutable distance.
About the role:The Senior IT Audit Manager is responsible for leading independent, risk-based technology audit coverage across People's Bank's technology landscape. The role provides assurance over the effectiveness of technology governance, cybersecurity, infrastructure, applications, data, cloud, operational resilience, and third-party technology risk controls. This position works closely with senior technology, business, risk, and compliance stakeholders to identify control gaps, communicate risk clearly, and support timely remediation while maintaining Internal Audit independence and objectivity.
The role also acts as a subject matter resource for IT audit practices, technology risk management, cybersecurity controls, regulatory expectations, and emerging technology risks relevant to a regulated financial services environment.
About the day-to-day: - Lead risk-based IT audit engagements from planning through reporting, including risk assessment, scope development, walkthroughs, control testing, issue validation, and final report preparation.
- Evaluate the design and operating effectiveness of controls across IT governance, cybersecurity, identity and access management, privileged access, change management, IT operations, application controls, infrastructure, cloud services, data management, disaster recovery, and third-party technology services.
- Manage audit execution to ensure work is completed on time, to required quality standards, and in accordance with Internal Audit methodology and professional standards.
- Supervise IT audit staff by reviewing audit documentation, providing coaching, and supporting technical and professional growth.
- Prepare clear, practical, and risk-focused audit observations that describe the condition, criteria, root cause, impact, risk rating, and management action required.
- Communicate audit results, emerging themes, and control issues to senior management in a concise and credible manner.
- Challenge management action plans to ensure they are appropriate, sustainable, and aligned to the level of technology risk identified.
- Monitor and validate remediation of IT audit issues, including closure testing and assessment of residual risk.
- Contribute to annual and ongoing audit planning by identifying technology risk trends, regulatory priorities, control themes, and areas of emerging risk.
- Apply data analytics, continuous auditing techniques, and technology-enabled testing approaches to improve audit insight, coverage, and efficiency.
- Provide advisory input on major technology initiatives, system implementations, process changes, and control enhancements while avoiding management decision-making responsibilities.
About the qualifications: - 7+ years of progressive experience in IT audit, technology risk, cybersecurity, IT controls, or related assurance roles, preferably within a financial institution or regulated financial services environment.
- Demonstrated experience leading complex IT audits and managing multiple audit engagements, issues, and stakeholder relationships concurrently.
- Strong knowledge of technology risk and control frameworks, including COBIT, NIST Cybersecurity Framework, ISO 27001, COSO, IIA Standards, and the Three Lines model.
- Practical experience assessing IT general controls, application controls, automated controls, cybersecurity controls, identity and access management, change management, IT operations, disaster recovery, cloud controls, and third-party technology risk.
- Understanding of regulatory expectations applicable to financial institutions, with the ability to translate requirements into audit scope, testing procedures, findings, and recommendations.
- Experience preparing audit reports and presenting technology risk matters to senior management, audit leadership, and governance forums.
- Ability to exercise independent judgment, professional scepticism, and constructive challenge while maintaining strong business relationships.
About the work environment: Peoples Group offers a flexible and hybrid work environment. In this role you will work a combination of in-office and remotely from home. Typically, you'll be working regular business hours, Monday to Friday between 8:00am and 4:30pm with flexibility around start/end times.
We offer: - A hybrid work environment, enabling you to balance your personal and professional life seamlessly.
- Competitive salaries, profit sharing, RRSP matching and benefits from day one.
- Generous paid time off to help achieve a healthy work-life balance.
- A commitment to your well-being in five key areas: Financial, Physical, Social, Career, and Community.
Hiring process: If your application is selected, you will be invited for a first interview with one of our Talent Acquisition Business Partners. Depending on the role, interviews may be conducted virtually or in-person. The hiring team will communicate any in-person requirements throughout the process.
Compensation: The expected salary for this role is approximately $130,000.00 - $140,000.00 annually. Actual compensation may vary based on experience, skills, and qualifications.
NOTE: This job posting is for an existing vacancy.
