Manager of Audit II-IT Platform

• The technology auditor will focus on application and system infrastructure controls that manage business risks and are responsible for understanding, analyzing, and testing the technology controls, including those over data accuracy, completeness and processing, systems development, application security and entitlements, production management and technology governance. Tech Auditors will work closely with our Business Auditors to perform integrated audits in compliance with recognized professional standards and with approved CNB audit Methodology
• Collaborates with Non-IT (e.g. Operational, Financial, Wealth Management, etc.) Audit counterparts during all phases of an integrated audit to ensure sufficient IT audit coverage. This includes assessing business processes to identity the key application(s) utilized in processes and the top risks and controls that should be reviewed in the audit.
• Leads interviews and walkthroughs of IT and business process with the objective to identity top risk, key controls and define the audit scope and audit work programs
• Develops and executes test steps and sampling strategy that adequately and efficiently substantiate that identified controls are designed and operating effectively
• Incorporates the use of data analytics to improve audit efficiency and broaden the audited population
• Ensures all audit work (e.g., work papers, reports, etc.) conforms to the CNB’s audit methodology, including those performed by staff
• Drafts and communicates audit findings/audit report to executive and senior management to address identified risks, exposures and root causes
• Obtains and assesses responses to audit findings to ensure management action plans and target due dates are adequate in addressing the risk(s) and root cause(s) in a timely matter
• Where applicable, supervises staff and provides team members with appropriate guidance during the course of audits
• Where applicable, serves as the first line of review for staff work and provided corrective feedback were necessary
• Performs on-the-job training of staff auditors, and prepares and conducts formal/informal training for less experienced staff members.
• Where applicable, provides input on audit staff performance
• Oversees, trains and manages co-sourced audits or consultants to ensure work product meets CNB audit methodology expectations, as needed
• Keeps respective Director or Auditor-in-Charge apprised of project status, observations and audit findings.
• Demonstrated experience in working in a matrixed organization with proven ability to multitask and prioritize activities.
• Perform on-going and pro-active evaluation of significant projects and large-scale business initiatives for the purposes of identifying possible unmitigated risks and providing advisory services. Project types include, but are not limited to, integration of newly acquired businesses, implementation of new systems or technology (SDLC), enhancements of significant systems, etc.
• Assists in quarterly Continuous Monitoring activities, which include but are not limited to, performing risk assessments of assigned IT functions/depts., develop continuous assurance data analytics test strategies
• Perform Vulnerability assessment and penetration testing
• Deep understanding of network devices and firewalls
• Takes responsibility to develop own personal and professional leadership skills and capabilities
• Participates in social, charitable or inclusive committees within Internal Audit or RBC
• Build trusting relationships with Internal Audit peers and business partners

Must-Have*

• Bachelor's Degree or equivalent
• Minimum 5 years of audit experience or related experience
• CISSP - Certified Information Systems Security Professional Or
• CIA - Certified Internal Auditor Or
• CISM - Certified Information Security Manager Or
• CISA - Certified Information Systems Auditor
• CEH-Certified Ethical Hacker

Skills and Knowledge

• Must possess strong managerial, organizational, and verbal and written communication skills.
• Ideal candidate will have relevant experience in an IT department along with at least 4 years in banking or financial services, or equivalent experience in a consulting capacity
• Experience in use of data analytics, visualization and reporting – e.g. Tableau.
• Capable of working in an agile and dynamic team-based environment, can tolerate ambiguity, able to function independently, and demonstrates critical problem-solving abilities.
• Knowledgeable in COBIT
• Demonstrates a sound understanding IT application or program controls, These controls vary specific application. which are fully automated (i.e., performed automatically by the systems) designed to ensure the complete and accurate processing of data, from input through output. based on the business purpose of the IT applications Controls may include:Completeness checks - controls that ensure all records were processed from initiation to completion.Validity checks - controls that ensure only valid data is input or processed.Identification - controls that ensure all users are uniquely and irrefutably identified.Authentication - controls that provide an authentication mechanism in the application system.Authorization - controls that ensure only approved business users have access to the application system.Input controls - controls that ensure data integrity fed from upstream sources into the application system.Forensic controls - control that ensure data is scientifically correct and mathematically correct based on inputs and outputs