Director, IT Infrastructure Audit

Why you’ll love working here:
- high-performance, people-focused culture- our commitment that equity, diversity, and inclusion are fundamental to our work environment and business success, which helps employees feel valued and empowered to be their authentic selves- learning and development initiatives, including workshops, Speaker Series events and access to LinkedIn Learning, that support employees’ career growth- membership in HOOPP’s world class defined benefit pension plan, which can serve as an important part of your retirement security- competitive, 100% company-paid extended health and dental benefits for permanent employees, including coverage supporting our team's diversity and mental health (e.g., gender affirmation, fertility and drug treatment, psychological support benefits of $2,500 per year, and newly extended maternity/parental leave top of 26 weeks)- optional post-retirement health and dental benefits subsidized at 50%- yoga classes, meditation workshops, nutritional consultations, and wellness seminars- access to an annual wellness reimbursement program for health and wellness-related expenses for permanent and temporary employees- the opportunity to make a difference and help take care of those who care for us, by providing a financially secure retirement for Ontario healthcare workers

Job Summary

What you will do:
- Develops, maintains, and implements a risk-focused IT Audit Universe and IT Audit Plan and is responsible for audit prioritization and resource allocation throughout the year. Ensures that audit priority, scope, and issue ranking decisions are risk-based. Concludes on the design and effectiveness of controls.- Advises senior leadership on impacts of changes in regulations and the industry and recommends impacts to the IT audit plan and IT audit universe.- Develops Board Committee and Management reporting materials for assigned responsibilities. Responds quickly and appropriately to Board / Senior Management audit related questions.- Manages a team of seasoned IT audit professionals. Reviews and approves audit work products to ensure thorough and effective coverage, as well as timely and effective escalation of issues and conclusions.- Oversees the ongoing progress and remediation by management for all outstanding technology audit observations.- Experience with building dashboard and reports to communicate and advises Senior Management.-
- Presenting and persuading senior executives and will present relevant audit findings at Senior Leadership Committee meetings.- Works closely with Risk, Compliance, IT and Finance to support the resolution of audit issues and determines the closure of ongoing audit findings.- Has excellent project management skills ensuring that IT audits meet department and industry quality expectations and milestone dates.-
- Lead the design and execution of IT audit strategic initiatives.- Builds and implements an effective Continuous Monitoring Program built upon regular relationship management meetings and committees that focus on technology and emerging IT risks, regulatory matters, and best practice trends in the industry.- Builds and implements a risk-based analytic program and capabilities. Applies innovative automation and advanced analytical techniques to test hypotheses and add insights into audit findings.- Conducts research on industry trends, risks and make strategic and tactical recommendations. Keeps abreast of changes in audit practices, regulatory requirements, and Risk frameworks to understand their impact to internal auditing e.g. NIST, COBIT, ISO2700x. Updates senior leadership and the board on the propose audit updates based on these changes.- Perform other duties as requested.

What you bring:- Additional security certifications and designations such as CISSP, CISM, CompTIA Security, CEH is an asset.- Broad and deep knowledge of the general security threat landscape and regulatory requirements- Advanced understanding of IT and cybersecurity-specific risks and controls, as well as related frameworks, standards or guides, relevant provincial and federal regulatory requirements, and industry leading practices and risk trends-
- Proficient in leading, designing and the development of project specific approaches or testing methodologies, auditing principles and techniques.- Experience in leading system development reviews of new IT system implementations.- Hands-on knowledge of networking, coding, penetration testing and/or code review- Management experience in coaching and developing a team of seasoned professional staff- Advisory experience on cybersecurity, regulatory and technology risks and mitigating strategies- Experience building and implementing a Continuous Monitoring Program, innovative IT Audit Program or Data Analytics Program within the internal audit space.- Experience in Board & Senior Management Reporting- Bachelor’s degree in Computer Science, Management Information Systems, or a comparative field.