Manager, IT Audit

JoiningMCAP means you will be a part of our diverse workforce of highly talentedindividuals who are recognized for their expertise and success At MCAP, yourprofessional expertise, commitment to teamwork and passion for serviceexcellence are recognized and rewarded with competitive total rewards offering,a career with continuous learning and development (formal & informaltraining), and exciting opportunities in a dynamic, entrepreneurialenvironment.

The Role

This position is responsible for the planning, execution and reporting on IT audits, while delivering high quality, professional and cost-effective services. This function adds value by providing independent assessments of technology/security governance and internal control systems that safeguard the company’s assets with utilization of an integrated risk-based audit approach and the submission of value-add recommendations. This role will be responsible for preparing reports which include identification of internal control deficiencies that arise out of assessments of processes and procedures that support the business.

In addition, the Manager, IT Audit will assist the Associate Director and the Internal Audit team in assessing technology risks in relation with business process audits encompassing technology and security governance, key systems and related processes or services, to ensure internal controls and compliance are maintained per MCAP’s risk appetite limits while providing feasible recommendations, where required.

Plan and Execute Assigned IT Audits

• Establish scope of engagements through communication and meetings with auditee.
• Undertake comprehensive planning and risk assessments relating to IT network, applications, tools, and corresponding processes to ensure engagements identify and cover key IT risks.
• Ensure that detailed audit work is effectively focused on areas of significant risk.
• Prepare written communication and conduct planning meetings with auditee management.
• Develop and carry out engagement plans to deliver quality results on time and within budget.

Evaluate & Test Risks Managed by IT

• Conduct meetings with IT/Business Technology Group (BTG) personnel to understand objectives and management of system risks.
• Identify and assess IT risks and related control design for processes within audit scope.
• Document processes through narratives and/or flow charts, highlighting key controls.
• Develop and assess tests of controls, evaluate and document results.
• Assess process risks through use of IT audit tools and develop tailored test procedures to perform efficient and effective audits.

Prepare Audit Reports on Findings and Recommendations

• Prepare audit reports that consist of value-added recommendations to assess identified control deficiencies and improve risk management practices.
• Conduct closing meetings and document discussions with auditee management regarding preliminary audit findings.
• Effectively communicate ideas and recommendations, and identify appropriate solutions for risk management and operational efficiency issues.
• Work in partnership with IT management to identify cost-effective controls to address deficiencies.
• Prepare written audit reports that are easy to understand and meaningful to management.

Advisory Services

• Assist business units by providing advisory services to enhance risk management, security and governance processes for compliance with objectives and contribute to improved operations.
• Work in partnership with IT management and application owners to identify technical and security risks and to facilitate establishment of risk mitigation procedures.
• Assist with independent assessments of organizational business and technology initiatives.
• Partner with Data Management group to drive adoption of data analytics and automation.

Annual Planning and Strategic Initiatives for the Internal Audit Function

• Participate in development and implementation for Internal Audit strategic objectives.

Continuous Professional Development & Expansion of Business Knowledge

• Maintain ongoing communication with management regarding key IT, business and regulatory changes.
• Enhance and maintain relationships with IT management through positive discussion and consultation.
• Education through participation in or attendance at industry events regarding relevant regulatory changes, industry best practices and/or internal audit developments.
• Educate management on practical solutions to implement best practices to improve risk management, security and governance processes.

Preparation of IT Audit Reporting

• Communicate with IT management and application owners to determine progress on outstanding audit findings.
• Conduct timely testing to ensure remediation.
• Quarterly status reporting on outstanding audit findings.

What You Bring To The Team 

• 5+ years of IT Audit experience including integrated audits (testing of general controls andapplication controls).
• Experience utilizing Agile methodologies to perform IT assurance activities.
• Experience conducting infrastructure and network security audits.
• Financial services, capital markets and mortgage lending industry experience would be an asset.
• Ability to comprehend IT & business processes and their risk implications, analyze complex situations, reach appropriate conclusions, and provide value-add/practical recommendations.
• Experience in applying auditing standards and internal control concepts to plan, execute and report on evaluation of IT risks surrounding key processes/areas/functions.
• Strong knowledge of COSO and IT control frameworks (such as COBIT, ISO 27000, NIST).
• Strong knowledge of operating systems including Windows, UNIX and AS-400.
• Experience auditing cloud controls (such as Azure and AWS) preferred.
• Proficient with MS-Word, Excel, PowerPoint, Visio and data analytic tools (such as Power BI or IDEA).
• Strong customer service mindset with demonstrated success in partnering with IT management to achieve organizational goals.
• Proven relationship management skills and a demonstrated ability to deal effectively with staff at all levels.
• Excellent organizational and time-management skills with the ability to balance multiple priorities and engagements in a fast-paced environment.
• Exceptional oral and written communication skills.
• Strong analytical and problem-solving skills.
• Self-driven, results oriented and motivated with the ability to work independently and in a team environment.
• Carries out duties with integrity and takes responsibility for actions.
• College or university education
• CISA / CISM / CISSP designations are considered an asset.

If this sounds like you and you are looking to be a part of one of Canada’s largest independent mortgage finance companies, then we want to hear from you

Be A Part Of Something Great

MCAPis Canada’s largest independent MortgageFinance company withover $150 billion in assets under management providing mortgage solutions forresidential and commercial properties. For over 35 years,MCAP originates, trades, securitizes and services mortgages in offices acrossCanada. MCAP originates residential mortgages exclusively through the mortgagebroker channel as we believe that a professional mortgage broker is aconsumer's best option and MCAP actively promotes the services of mortgagebrokers across the country. MCAP is also a leader in the Canadian residentialconstruction lending market with over 25 years in the business. Our teams ofdedicated professionals serve a variety of developer, construction and lenderclients across Canada.

Position #: req1846

Employment Status: Permanent Full Time

Number Of Openings: 1

Department: Internal Audit

Internal Job Title: Manager, Internal Audit IT

The above information in this description has been designed to indicate the general nature and level of work performed by employees in the position. It is not designated to contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.

MCAP provides equal opportunities for all applicants and is committed to fostering an inclusive, accessible environment, where all employees feel valued, respected and supported throughout the recruitment and employment process. If you require accommodation, we will work with you to meet your needs.