Manager, IT Audit - Toronto, Canada - MCAP

MCAP

Verified Company

Toronto, Canada

2 weeks ago

Posted by:

Sophia Lee

beBee Recruiter

Description

Manager, IT Audit

MCAP at a Glance

Joining MCAP means you will be a part of our diverse workforce of highly talented individuals who are recognized for their expertise and success At MCAP, your professional expertise, commitment to teamwork and passion for service excellence are recognized and rewarded with competitive total rewards offering, a career with continuous learning and development (formal & informal training), and exciting opportunities in a dynamic, entrepreneurial environment.

The Role

This position is responsible for the planning, execution and reporting on IT audits, while delivering high quality, professional and cost-effective services.

This function adds value by providing independent assessments of technology/security governance and internal control systems that safeguard the company's assets with utilization of an integrated risk-based audit approach and the submission of value-add recommendations.

This role will be responsible for preparing reports which include identification of internal control deficiencies that arise out of assessments of processes and procedures that support the business.

In addition, the Manager, IT Audit will assist the Associate Director and the Internal Audit team in assessing technology risks in relation with business process audits encompassing technology and security governance, key systems and related processes or services, to ensure internal controls and compliance are maintained per MCAP's risk appetite limits while providing feasible recommendations, where required.

Plan and Execute Assigned IT Audits

Establish scope of engagements through communication and meetings with auditee.
Ensure that detailed audit work is effectively focused on areas of significant risk.
Prepare written communication and conduct planning meetings with auditee management.
Develop and carry out engagement plans to deliver quality results on time and within budget.

Evaluate & Test Risks Managed by IT

Conduct meetings with IT/Business Technology Group (BTG) personnel to understand objectives and management of system risks.
Identify and assess IT risks and related control design for processes within audit scope.
Document processes through narratives and/or flow charts, highlighting key controls.
Develop and assess tests of controls, evaluate and document results.
Assess process risks through use of IT audit tools and develop tailored test procedures to perform efficient and effective audits.

Prepare Audit Reports on Findings and Recommendations

Prepare audit reports that consist of valueadded recommendations to assess identified control deficiencies and improve risk management practices.
Conduct closing meetings and document discussions with auditee management regarding preliminary audit findings.
Effectively communicate ideas and recommendations, and identify appropriate solutions for risk management and operational efficiency issues.
Work in partnership with IT management to identify costeffective controls to address deficiencies.
Prepare written audit reports that are easy to understand and meaningful to management.

Advisory Services

Assist business units by providing advisory services to enhance risk management, security and governance processes for compliance with objectives and contribute to improved operations.
Assist with independent assessments of organizational business and technology initiatives.
Partner with Data Management group to drive adoption of data analytics and automation.

Annual Planning and Strategic Initiatives for the Internal Audit Function

Participate in development and implementation for Internal Audit strategic objectives.

Continuous Professional Development & Expansion of Business Knowledge

Maintain ongoing communication with management regarding key IT, business and regulatory changes.
Enhance and maintain relationships with IT management through positive discussion and consultation.
Education through participation in or attendance at industry events regarding relevant regulatory changes, industry best practices and/or internal audit developments.
Educate management on practical solutions to implement best practices to improve risk management, security and governance processes.

Preparation of IT Audit Reporting

Conduct timely testing to ensure remediation.
Quarterly status reporting on outstanding audit findings.

What You Bring To The Team

Experience utilizing Agile methodologies to perform IT assurance activities.
Experience conducting infrastructure and network security audits.
Financial services, capital markets and mortgage lending industry experience would be an asset.
Ability to comprehend IT & business processes and their risk implications, analyze complex situations, reach appropriate conclusions, and provide valueadd/practical recommendations.
Strong knowledge of COSO and IT control frameworks (such as COBIT, ISO 27000, NIST)