Requisition ID: 266064
Position: Senior Audit Manager, IT
PurposeAs the 3rd Line of Defense, Internal Audit provides enterprise-wide, independent, and objective assurance over the design and operations of the Bank's internal controls, risk management and governance processes. We are professionals who thrive in a challenging environment and work with management to find solutions to address control weaknesses.
The Senior Audit Manager assists in leading internal audit activities for Cybersecurity and Infrastructure in support of the Audit Department in executing on its global mandate, ensuring business strategies, plans and initiatives and all audit activities are conducted / executed / delivered in compliance with governing regulations, internal policies, and procedures.
The Senior Audit Manager is a dynamic, innovative, and trusted advisor who uses data to deliver industry leading assurance and insights to keep the Bank and our customers safe.
Accountabilities• Acts primarily as Officer in Charge (OIC) as a team member for assigned audits. May act as Audit Principal (AP) for low to medium complexity audits.
• Works with other audit teams as required.
• Carries out specific IT audit projects, specifically in relation to Information Security, IT Infrastructure, Networks, IT Applications, with potential for involvement in Data Governance and Cybersecurity.
• As OIC/AP, oversees audit planning, execution, and reporting. Obtains a thorough understanding of the end-to- end business/unit/process and associated risks, develops an appropriate risk-based audit approach and schedules timing and resources.
• Ensures audit results are gathered and determines the root cause of the problem. Prepares and/or reviews audit results and findings for presentation to management. Follows-up for corrective action/progress against any reported issues. Ensures relevant information that impacts other audit function areas is shared.
• Supports a client focused culture throughout their team to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.
• Understands how the Bank's risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Plans, documents, and seeks agreement in advance to the project approach and confirms conclusions upon completion in writing.
• Ensures Scotiabank standards and the Institute of Internal Auditors (IIA) Code of Ethics are maintained in completion of all assignments.
• Builds and maintains strong relationships with internal and external stakeholders and regulators as required.
• Interacts and coordinates with other groups involved. Completes timely review of workpapers, ensuring internal control weaknesses are clearly documented with recommendations addressing the root cause and are communicated timely to management.
• Supports ongoing monitoring activities to stay abreast of changes (business/industry/regulatory), emerging risks, and themes or systemic issues that may impact the risk assessment of the audit universe and the audit plan.
• Supports a high-performance environment and implements a people strategy that attracts, retains, develops, and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviors; communicating vision/values/business strategy; and managing succession and development planning for the team.
• Meets Department training requirements.
• Perform risk assessment of IT environments, including general IT controls and automated application controls within information technology systems and underlying IT infrastructure.
• Evaluate technical controls including but not limited to cybersecurity, disaster recovery, digital, privacy, and cloud security for design and operating effectiveness.
Reporting Relationships
Primary Manager: Director or Vice President, Audit
Direct Reports: Audit Managers and/or Auditors
Shared Reports: None
DimensionsEducation / Experience / Other Information:- University/Post secondary degree in Business or equivalent.
- Relevant Audit or business certifications (e.g., CISA, CISSP, CISM).
- At least 7+ years of relevant experience.
- Working knowledge of the operations and regulatory environments for each unit as applicable.
- Proven ability to work in high levels of ambiguity and in a rapidly changing environment.
- Highly proficient at applying Scotiabank methodology and using risk-based auditing standards and practices.
- Strong analytical skills in the use of data analytics or visualization tools.
- Ability to execute and supervise multiple projects at any given time.
- Highly developed interpersonal and communication skills (verbal and written).
- Strong people management and coaching/development skills.
- Curiosity mindset
Working Conditions• Work in a standard office-based environment; non-standard hours are a common occurrence, especially at quarter end.
• Moderate travel to participate on audit assignments.
• Deadlines and schedule changes are frequent due to unforeseen events.
Interested? If your experience is closely related but doesn't align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank!
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That's why we work to grow and diversify talent and engage employees in a performance-oriented culture.
What's in it for you?
Scotiabank wants you to be able to bring your best self to work - and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs.
#GBM
Location(s): United States : Texas : Dallas
