Job descriptionTitle: IT Risk Manager - Internal Audit Location: Hybrid ( 1-2 days per week) Duration: TBD Clearance: Must have a valid or be eligible for Reliability Clearance. ( Candidates must have resided in Canada for a minimum of five consecutive years.) Objective Provide independent IT Audit Services to support the Internal Audit function by assessing technology risks, controls, and governance practices. Key Responsibilities - Lead complex IT audit engagements from planning through reporting, focusing on cybersecurity, cloud, data/privacy, IAM, AI, third-party technology, and emerging risks. - Perform risk assessments, control evaluations, testing, and evidence-based analysis. - Review and challenge audit work to ensure quality, consistency, and sound conclusions. - Develop clear audit findings outlining root causes, risks, and improvement opportunities. - Prepare and present executive-level reports to senior management and the Audit Committee. - Engage with Director- and VP-level stakeholders on audit objectives, issues, and findings. - Identify systemic risk themes and support improvements to IT audit practices. - Use data analytics and Generative AI to improve risk sensing, testing coverage, efficiency, and reporting. Top Skills Required - Strong knowledge of cloud, cybersecurity, identity, networks, endpoint security, data platforms, and Agile delivery. - Experience with frameworks such as NIST, CIS Controls, COBIT, ISO 2700x, and IIA Standards. - Expertise in technology risk areas such as cybersecurity, cloud/IAM security, data governance, third-party risk, and technology resilience. - Experience using analytics tools such as Power BI, ACL/HighBond, IDEA, Python, or SQL for audit and risk analysis. - Strong executive communication and stakeholder management skills. - Professional certification such as CISA, CISSP, CISM, CRISC, or CGEIT.