Manager leading SOX and ICFR compliance at Canada's largest fintech, ensuring regulatory obligations and building a scalable compliance function.
Responsibilities
Own and manage the IT general controls (ITGCs) component of the ICFR compliance program while supporting the build out of the ITGCs & IT Application controls (ITAC) for the SOX program from the ground up, leveraging existing frameworks and controls where applicable
Partner with Finance, IT, and business stakeholders to identify and document key controls over financial reporting, ensuring controls are designed and in place ahead of audit cycles
Ensure ITGCs and ITACs supporting financial systems are properly documented and operating as intended
Serve as the primary point of contact for external auditors, coordinating evidence requests, walkthroughs, and finding remediation
Build and maintain a controls inventory with clear ownership, documentation standards, and readiness status
Work cross-functionally with control owners to ensure gaps are identified early and remediation plans are in place before audit periods
Develop and report on compliance readiness and control health to senior leadership
Drive continuous improvement in the efficiency and effectiveness of the SOX Compliance system (AuditBoard) and related technologies
Maintain current knowledge of emerging risks, industry trends, and regulatory changes relevant to the business and the audit profession
Expand ownership to include SOC 1&2, PCI DSS, and NIST compliance programs, building a unified compliance function
Lead a small team of compliance specialists, providing mentorship, prioritization, and ensuring alignment across the aforementioned compliance initiatives
Requirements
6-8 years of experience in IT audit, compliance, or security assurance, with deep expertise in SOX/ICFR compliance (preferably in financial services or fintech)
Strong understanding of COSO framework, ITGCs, ITACs, and control design principles
Experience working with external auditors on SOX engagements, particularly in a coordination or liaison capacity
Proven ability to lead and manage a team, ensuring that audit deliverables are met efficiently and on time.
Working knowledge of SOC, PCI DSS, and/or NIST frameworks is a strong asset
Proven ability to manage multiple compliance workstreams and competing priorities
Strong stakeholder management and communication skills with ability to influence across technical and non-technical teams
Experience with GRC tools and control management platforms
Self-directed professional who can build programs from the ground up and drive initiatives to completion
Relevant certifications preferred (CISA, CISSP, CPA, CIA, or equivalent)
Benefits
Top-tier health benefits and life insurance
Long-term group savings with employer match, through Wealthsimple for Business
20 vacation days, 4 wellness days, and unlimited sick and mental health days per year
90 days away: work outside Canada for up to 90 days per year
Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS
Business Development & Capture Lead for Global Spatial Technology Solutions driving revenue growth in defence sector. Engaging senior stakeholders and leading proposal development across global markets from a remote location.
IT & Security Specialist managing IT operations, security, and infrastructure for Senstar, a leader in security technology. Hands - on role blending end - user support, cybersecurity, and infrastructure management.
HR Systems Security Specialist responsible for design, configuration, and administration of security within Workday and SAP. Collaborating with HR and stakeholders to ensure effective access design and compliance.
Cybersecurity advisor working within the DCYB to develop IT security measures. Collaborating with teams to fortify cybersecurity posture and ensuring data protection for citizens.
Consultant in remuneration and occupational health and safety at the Quebec Federation of Municipalities. Ensuring employee needs match organizational requirements and promoting a safe work environment.
Cybersecurity Administrator providing operational support for compliance activities in information security. Assisting vendor risk management, audit coordination, and vulnerability tracking.
Sr. Manager leading cloud security, compliance, and governance at Metergy Solutions Inc. Drive regulatory adherence and risk mitigation across diverse cloud environments with a focus on security by design.
Security Advisor responsible for designing telecommunications network architectures at Alithya. Ensuring all components meet functional and non - functional requirements while adapting to new trends in the field.
Technical Lead in Cybersecurity Engineering at Morgan Stanley driving security initiatives. Collaborate with tech leaders to ensure enterprise - wide cybersecurity effectiveness and compliance in Montreal.
Cyber Security Intern supporting the operation of Capital Power’s cyber security infrastructure. Engaging in daily operational tasks, security reviews, and incident investigations.