Internal audit Jobs in Markham, ON

Compensation: $80,-90, plus up to 5% target bonus, up to %

Job Summary

Manage, maintain and enhance the overall Business Resiliency (BR) Program for G+D Canada, inclusive of the Technology, Operations, Security and Business teams, such that it allows business operations to rapidly adapt and respond to internal or external dynamic changes – disruptions or threats – and continue operations with limited impact to the business. Provide leadership in identifying and managing operational risk, gap assessment and continuous improvement of processes. Serve additionally as backup cryptographic Key Manager for G+D Canada.

Business Resiliancy Responsibilities

Internal Expectations:

• Manage and lead the day-to-day operations and functions of Disaster Recovery and Business Continuity for G+D Canada
• Develop, update and enhance the G+D Canada BC/DR plans and documentation
• Continuously assess gaps in DR plans and provide recommendations and options to address
• Coordinate G+D Canada’s Business Continuity Management System, including the annual Business Impact Analysis and BC Risk Analysis
• Identify Business, Operational and IT risk. Develop and implement recovery procedures for review and approval with DR Steering Committee members
• Partner with other functional departments to ensure business continuity plans are inclusive of an end to end process including Back-up and Recovery plans and Procedures.
• Provide consultation on Business and Regulatory Requirements to ensure adherence with DR recovery procedures, contracts and SLAs
• Lead and coordinate regular DR Steering Committee meetings to share updates, issues, plans and approvals
• Maintain communication plans to effectively facilitate team meetings to communicate progress, status, risks and create a sense of urgency to resolve any issues
• Administer the G+D Alert System (G+D Canada’s automated emergency communication platform) and coordinate G+D Alert testing and awareness activities
• Partidipate and support BC/DR event management and crisis escalation function
• Provide Training and Awareness Business Continuity TableTop and Emergency Communication, and Disaster Recovery Exercises
• Provide comprehensive reports on BC/DR activities. Highlight progress, challenges, and areas for improvement

Client Delivery Expectations:

• Participate in regulatory audits and provide input into Client Questionnaires
• Manage the semi-annual coordination and verification of Client DR testing with external and internal customers (including documenting nonconformances, identifying owners and tracking to completion)
• Align with Sales and Clients the appropriate SLA, RTO and RPO based on established DR plans
• Represent G+D in a professional manner for client engagements on DR projects and works closely with the Account Executives on client management
• Provide required Attestation Letters to clients according to their needs

Key Management Responsibilities

Internal Expectations:

• Act as Deputy for Key Manager
• In alignment with the Key Manager, support the physical equipment associated with Key Management activity (e.g. physical keys, authentication codes, smart cards, key component safes, Hardware Security Module (HSM) Cards, HSM PCs/Servers, etc.)
• Support the transfer of key-management roles between individuals (Key Management Personnel Succession)
• Assist the HR department (when requested) in vetting key custodians to ensure their suitability for the role
• Assist the Key Manager in ensuring that all key custodians have been trained with regard to their responsibilities, and this forms part of their key management system training
• Ensure that each custodian signs a statement acknowledging that they understand their responsibilities.
• Provide support and prepare Key Ceremony for internal and external clients
• Provide support and prepare quarterly safe inventory
• Review the suitability of personnel on an annual basis
• Perform quarterly audits of key storage safes and providing direction to Dorval staff for the quarterly audits of the Dorval safe)
• Manage Key Management Security Hardware, including the Installation/ Configuration/ Commission/ Removal/ Decommission of HSMs under dual control
• Maintain Audit trails for Key Management activities
• Maintain and Update Key Management Documentation & Supplies – Key Management Manual, Forms, Lists, logs, Tamper Proof Envelopes

Client Delivery Expectations:

• Gather and submit Key Management evidence for Audits
• Participate in Audits on behalf of Key Management (Payment System, Client, Internal, etc.)
• Post-Audit Remediation Planning & Execution for any Key Management Findings & Recommendations

Qualifications, Experience and Educational Requirements

Work Experience:

• Minimum 5 years’ experience managing Disater Recovery, Business Continuity and Key Management with proven results
• High level of computer competency in Microsoft Office Products (MS Word, Excel, PowerPoint, Project, Visio) and good knowledge of SAP Systems.
• Experience with Cryptography, EMV® (Europay MasterCard Visa) chip and payment card industry is preferred

Skills and Competencies:

• Analytical, detail-oriented with excellent planning and problem solving skills
• Excellent interpersonal relations and demonstrated ability to effectively work with and lead others in teams
• High level of urgency balanced against measured thinking and attention to detail
• Ability to work independently and take responsibility for actions
• Ability to conceptualize, analyze and implement efficient workflows
• Ability to work successfully with cross-functional teams
• Superior verbal and written communications skills including presentation at every level of the organization
• Effective and persuasive communication skills
• Technical knowledge of statement printing and secured card manufacturing process
• Excellent time management and multi-tasking skills
• Disciplined approach to reporting, metrics and performance management

Education:

• A University or college degree in a relevant discipline. Preference will be given to candidates with a Computer Science, Engineering or Business Administration degree
• Project Management Professional (PMP) certification is an asset