IT Internal Audit, Senior Manager

Haventree Bank is a private Canadian Schedule 1 bank specializing in alternative mortgage programs and insured GIC deposits. We help hardworking Canadians from coast-to-coast achieve homeownership by offering flexible mortgage solutions. Our insured GIC deposits offer competitive rates and are available through a variety of wealth management platforms.  

About Haventree Bank  

Headquartered in Toronto, Ontario, Haventree Bank (Haventree) is a mission driven alternative mortgage lender. The name Haventree is representative of the bank's mission to help its customers find a place of refuge and to lay down new roots for the future. Haventree exists to be a catalyst of financial security and upward mobility for Canadians who are underserved by the traditional financial system. 

Position Summary: 

Reporting to VP, Internal Audit the IT Internal Audit Senior Manager is responsible for assisting the VP, Internal Audit develop and execute an effective, risk–based audit plan that provides adequate coverage to assess the effectiveness of the 2nd and 1st lines of defence in mitigating risk.

Major Duties & Responsibilities:

• Assist in high-level reporting and planning, including: the annual risk-based audit plan and the ACRC report
• Execute project and team management responsibilities including review of work to ensure quality and providing regular updates to the VP, Internal Audit on the status of project deliverables
• Champion the development and maintenance of data analytics for assigned audit areas
• Develop strong working relationships with senior non-executive management and the 2nd line's risk and compliance teams
• Assess the design and operating effectiveness of IT general controls (ITGCs) across various systems and platforms
• Conduct risk assessments and identify controls in place to mitigate identified risks
• Design and perform audit procedures to evaluate design and operational effectiveness of controls
• Document the results of audit work in accordance with Haventree Bank's Audit Methodology and the Institute of Internal Auditors (IIA) standards
• Assess, evaluate and promote compliance to internal policies
• Research emerging or technical subjects when required to support audits (e.g. NIST, OSFI Guidelines, ISACA, etc.)

Qualifications & Experience:

• Professional certifications such as CISA, CISSP, CPA, or CIA are required

Years and Range of Experience Required to Perform the Job:

• The position requires 5-7 years' experience in risk-based IT auditing preferably within financial services or public accounting
• Strong understanding of ITGCs, cybersecurity, and data analytics tools.
• Proficiency in auditing complex IT environments and systems
• Have in-depth knowledge on key regulations and legislation affecting the residential mortgage business (e.g. OSFI, B-13 – Technology and Cyber Risk Management)
• The Internal Audit Senior Manager is required to work across the organization and champion IT and Cyber risk-mitigation and compliance with internal policies
• Internal Contacts: This role collaborates with the below individuals to understand internal processes, communicate audit findings, and finished reports: Senior Management, Department Heads, Managers, Staff Contributors
• External Contacts: This role collaborates with third-party vendors and external auditors on internal process, findings, and finished reports.

While we thank everyone for their interest in Haventree Bank, please note that only candidates selected for an interview will be contacted. Haventree Bank is committed to providing accommodation when needed. If you require an accommodation, we will work with you to meet your needs.  

1. As a job candidate, our recruitment process includes collecting personal information. Please click the link here to review our Privacy Policy. Privacy Statement | Haventree Bank
2. Stay in touch with us, if this position is not the right one for you – please click on this link for other roles at Careers | Haventree Bank or follow us on LinkedIn at 
3. Haventree Bank embraces equal opportunity, diversity, and inclusion. Please let us know if you require any accommodations during the recruitment and selection process by contacting