Senior Manager, Technology Control Testing in Toronto

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. The Technology Control Testing team plays an important role in the Bank’s Three Lines of Defense Framework, providing First Line of Defense for all lines of business on all technology risk domains, including Cyber Security, Data Privacy, Software Lifecycle Management, Capacity, Incident Management, Disaster and Backup Recovery, Third Party Management, Project Management, and Audit & Regulatory issue remediations.

Senior Manager, Technology Control Testing directly supports the Head of Technology Control Testing to collaboratively assess high risk processes across business lines and manage the execution of the control test exercise(s). This role is part of a strategic and comprehensive IT Risk Management Function within the Technology First Line of Defense, and ensures design and implementation in accordance with regulatory expectations, risk appetite, organizational risk practices and evolving business practices.

The role includes significant coordination and engagement with peers across all business lines and technology functions. This includes 1st, 2nd, and 3rd lines of defense for Technology in the execution of risk management activities, inclusive of regular updates, formal reporting and managing remediation commitments identified (e.g., audit findings).

In this role, you will:

• Ensure specific goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives and all activities conducted are in compliance with governing regulations, internal policies and procedures.
• Lead the assessment of control design and operating effectiveness across applicable Technology Risk & Control Domains (TRCDs), including IT General Controls, Data Protection, automated controls, and other technology risk areas.
• Lead and/or manage control walkthroughs and testing activities across TRCDs to evaluate control design, implementation, and operating effectiveness.
• Advise and support risk owners in day-to-day risk management activities and execution.
• Act as a primary interface and conduit between the risk owners and other risk groups to lead the facilitation and execution of risk management activities.
• Comply and (where applicable) present risk update reports to Senior Management.
• Identify, assess, prioritize and report on material IT risks for IT and aligned business areas.
• Develop or enhance monitoring tools to evaluate the design and operating effectiveness of the key controls in the Business.
• Lead internal control reviews of high-risk processes including procedure testing, establishing test plans and test scripts, providing recommendations, providing feedback and reporting to Global Head of Technology Control Testing.
• Document and monitor progress of remedial actions for issues identified through Technology Control testing and by others.
• Ensure implementation of a strong IT risk culture in partnership with the risk owners and other control functions.
• Review and contribute to technology policies and standards under development or review, as applicable.
• Monitor effectiveness of portfolio impacting governance processes such as change management, project management and architecture reviews, for enforcing control requirements.
• Engage in business integration projects to ensure all appropriate technology controls and processes are implemented.
• Collaborate with IT Risk Senior Managers for other business units to improve risk management practices across the enterprise.
• Build a high-performance environment and implement a people strategy that attracts, retains, develops and motivates their team.
• Provide ongoing coaching and guidance to less experienced Technology Control Testing staff.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• Experience with COBIT, CIS, and NIST frameworks.
• Exposure to SOX requirements.
• Experience in a wide area of risk controls such as infrastructure risk, application risk.
• Ability to work with minimal supervision and deliver to tight deadlines.
• Knowledge and experience in at least 5 technology disciplines.
• Experience in managing remediation programs is desirable.
• Data Analytics and Visual dashboarding skills (PowerBI/Tableau) are desirable.
• Certified Information Systems Auditor (CISA) and Certified in Risk and Information System Control (CRISC) are desirable.

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - we offer opportunities for community engagement & belonging with our various programs.

Location(s): Canada : Ontario : Toronto