Application Deadline:
10/30/2026
Address:
100 King Street West
Job Family Group:
Audit, Risk & Compliance
Provides strategic leadership and enterprise-wide oversight of audit coverage across Cybersecurity and Core Technology, ensuring robust, risk-based assurance aligned to the Bank’s evolving technology landscape. The role establishes the audit strategy, testing priorities, and integrated coverage approach for high-risk technology domains, including cybersecurity resilience, technology infrastructure, cloud platforms, engineering practices, software development, service management, technology operations, platform support, operational resilience, physical security, and technology-enabled transformation programs. Operating within the Technology & Operations Audit mandate, the role identifies horizontal audit touchpoints, dependencies, and control considerations across the broader Corporate Audit ecosystem, partnering with LOB and Chief Auditor groups to deliver coordinated coverage.
Define and execute a risk-based, integrated audit strategy across Cybersecurity and Core Technology that focuses on both current and future focused emerging risk reviews
Lead ongoing risk assessment activities and development of audit coverage strategies to provide independent assurance over Cybersecurity and Core Technology risks, control effectiveness, and risk management practices.
Strengthen audit capabilities across Cybersecurity and Core Technology through workforce planning, technical specialization, succession management, methodology enhancement, and targeted capability development in cyber, cloud, infrastructure, engineering, and technology operations risk domains.
Maintain integrated, risk-based audit coverage across cybersecurity, engineering, technology operations, service management, platform support, cloud, infrastructure, software delivery, operational resilience, and third-party ecosystems, with a focus on identifying systemic risks, enterprise-wide control dependencies, and emerging technology risks. Proactively build partnerships across business, technology, control, and audit teams to support effective risk management, issue remediation, and sustainable control environment
Serve as the senior audit relationship lead for technology executives, including CISOs, engineering, infrastructure, and operations leaders, while maintaining strategic partnerships with regulators, control functions, and other key stakeholders .Lead audit support for regulatory examinations, horizontal reviews, regulatory commitments, and remediation activities related to Cybersecurity and Core Technology. Ensure audit insights, thematic observations, and risk perspectives are communicated effectively to executive management and the Board. Provide strategic leadership and performance oversight of Directors responsible for portfolio execution and identify opportunities to strengthen ownership and risk alignment while expanding control-level, domain-specific coverage
Ensure quality, consistency, and timeliness of audit delivery through standardized methodologies, reusable testing approaches, and continuous improvement practices. Establish proactive audit engagement and continuous monitoring across portfolios to enable real-time reprioritization and end-to-end risk visibility
Drive adoption of analytics, continuous assurance, and AI-enabled auditing (e.g., AI-enabled threats, advanced cyber risks) for better forward-looking risk insights
Deliver thematic insights, root-cause analysis, and enterprise-wide risk perspectives across technology domains.
Within the mandate of this role, promotes and supports the Bank’s risk culture including ensuring employees understand their accountabilities for risk-taking activities, promoting an environment of open communication and effective challenge, and establishing the “tone from the top” through leading by example.
Takes measured risks while protecting the bank by applying our Risk Management Framework in the execution of…