Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
About the role
- Manager leading SOX and ICFR compliance at Canada's largest fintech, ensuring regulatory obligations and building a scalable compliance function.
Responsibilities
- Own and manage the IT general controls (ITGCs) component of the ICFR compliance program while supporting the build out of the ITGCs & IT Application controls (ITAC) for the SOX program from the ground up, leveraging existing frameworks and controls where applicable
- Partner with Finance, IT, and business stakeholders to identify and document key controls over financial reporting, ensuring controls are designed and in place ahead of audit cycles
- Ensure ITGCs and ITACs supporting financial systems are properly documented and operating as intended
- Serve as the primary point of contact for external auditors, coordinating evidence requests, walkthroughs, and finding remediation
- Build and maintain a controls inventory with clear ownership, documentation standards, and readiness status
- Work cross-functionally with control owners to ensure gaps are identified early and remediation plans are in place before audit periods
- Develop and report on compliance readiness and control health to senior leadership
- Drive continuous improvement in the efficiency and effectiveness of the SOX Compliance system (AuditBoard) and related technologies
- Maintain current knowledge of emerging risks, industry trends, and regulatory changes relevant to the business and the audit profession
- Expand ownership to include SOC 1&2, PCI DSS, and NIST compliance programs, building a unified compliance function
- Lead a small team of compliance specialists, providing mentorship, prioritization, and ensuring alignment across the aforementioned compliance initiatives
Requirements
- 6-8 years of experience in IT audit, compliance, or security assurance, with deep expertise in SOX/ICFR compliance (preferably in financial services or fintech)
- Strong understanding of COSO framework, ITGCs, ITACs, and control design principles
- Experience working with external auditors on SOX engagements, particularly in a coordination or liaison capacity
- Proven ability to lead and manage a team, ensuring that audit deliverables are met efficiently and on time.
- Working knowledge of SOC, PCI DSS, and/or NIST frameworks is a strong asset
- Proven ability to manage multiple compliance workstreams and competing priorities
- Strong stakeholder management and communication skills with ability to influence across technical and non-technical teams
- Experience with GRC tools and control management platforms
- Self-directed professional who can build programs from the ground up and drive initiatives to completion
- Relevant certifications preferred (CISA, CISSP, CPA, CIA, or equivalent)
Benefits
- Top-tier health benefits and life insurance
- Long-term group savings with employer match, through Wealthsimple for Business
- 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year
- 90 days away: work outside Canada for up to 90 days per year
- Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS
Job title
Job type
Experience level
Salary
Degree requirement
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
Application Security Developer securing Clio’s AI - powered legal technology platform through .NET development, vulnerability remediation, and automated application security tooling. Hybrid Toronto Hub role.
Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.
Senior Cybersecurity Architect designing Zero Trust, IAM, SIEM, and cloud security solutions for Manulife’s financial services business. Supporting enterprise architecture, incident response, and security strategy.
Consultant cybersécurité hybride à Montréal chez I - TRACING, pure - player indépendant en sécurité informatique. Conception, déploiement et support de solutions IAM, réseau, systèmes et applications.
Desjardins property technician supporting fire prevention, building safety, management, and build - out projects. Providing technical support, process coordination, user training, and operational guidance.