Physical security specialist supporting Sun Life’s financial - services mission through threat intelligence, investigations, and incident analysis. Hybrid role engaging leaders, security partners, and emergency services.
FB
Director, Internal Audit – Technology, Information Security, AI
Posted 5 months ago
About the role
- Director of Internal Audit leading audits and advisory work in technology and digital risk at Fairstone Bank. Ensuring independence assurance over technology risks including cybersecurity and data management.
Responsibilities
- Lead the planning and delivery of risk-based audits and advisory work across the Bank’s technology and digital risk domains.
- Provide independence assurance over technology risks across ITGCs, cybersecurity governance, cloud governance, data management, AI, and technology operations.
- Own and maintain the technology audit universe for core domains: Technology Strategy, Data, and AI, Technology Integration, Software Engineering, Digital Services, Technical Services & Performance, Technology Operations, and Information & Cyber Security.
- Maintain awareness of technological changes in both external and internal environments including trends in risk management practices and regulatory expectations, and changes in business activities to perform quarterly risk assessments.
- Lead the annual technology risk assessment, identify appropriate audits to be included in the annual audit plan and help develop the Plan for the Audit Committee approval.
- Oversee execution and end-to-end delivery of all audit projects, ensuring all documentation and audit reports are complete.
- Coordinate use of co-sourced technical experts for deep cyber/cloud/AI testing where needed.
- Deliver balanced and insightful reporting to the Chief Internal Auditor and Audit Committee on technology risk posture, themes, and systemic gaps.
Requirements
- University degree in information systems, Computer Science, Engineering, Accounting, or related field.
- Certified Information Security Audit designation.
- Certifications in Audit: CIA, Risk: CRISC, CGEIT, Security: CISSP, CISM, CCSP, ISO 27001.
- Cloud: AWS/Azure/GCP security or architecture certifications.
- Data/Privacy: CDMP, CIPT/CIPM/CIPP, ISO 27701.
- 10+ years of progressive experience within the Financial Services Industry.
- Solid Information Technology (IT)/Information Security (IS) audit and/or similar management experience in a regulated financial institution.
- Strong experience leading audits of information technology, information security, data management, and project management, in conformance with IIA Standards.
Benefits
- Generous vacation based on your role, statutory holidays, plus 6 wellness days to prioritize your well-being.
- Competitive base salary plus an annual incentive bonus tied to performance.
- Robust health and dental coverage through Manulife, as well as virtual healthcare through Dialogue.
- Group Retirement Savings Plan with up to 7% employer match.
- Discounts from top retailers via WorkPerks, plus location-based perks like gym memberships and Toronto Bike Share.
- Gym access at our London and Montreal offices.
- Education Assistance Program and Fairstone Academy for training and skill development.
- Parental leave top-up program to help you during life’s big moments.
- One paid volunteer day to give back to causes that matter to you.
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Expert en stratégie numérique d’identité et sécurité chez Beneva, assureur et fournisseur de services financiers. Définit la feuille de route d’authentification, de validation d’identité et de gestion des accès.
Head of Security leading Super.com's AI - first security program and enterprise risk strategy. Building security teams, protecting financial technology products, and partnering with executives and the board.
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.
Senior SOC Level 2 specialist protecting OLG’s lottery and gaming operations from cyber threats. Investigating incidents, containing attacks, and improving detection capabilities.
Workshop Director delivering cybersecurity and IT advisory workshops for Info - Tech Research Group. Leading client assessments, recommendations, research contributions, and AI capability development.
Senior Security Consultant guiding Akamai customers through security integrations and support. Delivering trusted technical consultancy across the company’s cloud, edge, and security products.
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.