Manager, IT Audit

The Audit and Financial Investigations Branch (Branch) works collaboratively with internal branches and external stakeholders to support effective regulatory risk management and strengthen regulatory outcomes. The Branch conducts risk-based audits and reviews across all regulated sectors provides strategic advice and insights to internal partners and delivers objective reliable findings that support informed regulatory Branch is seeking a driven and strategic Manager IT Audit (Manager) to lead and oversee the IT Audit Unit. The unit delivers complex risk-based IT audits across regulated sectors supporting the Branchs broader mandate of strengthening regulatory risk management and assurance outcomes. Reporting to the Senior Manager Audit Services the Manager provides oversight of both planned and ad hoc audit activities engaging a range of internal and external stakeholders to ensure effective delivery. It is also accountable for managing externally procured audit cybersecurity and forensic investigation service providers to support high-quality and independent assurance You Will Do:Lead and manage the IT Audit Unit within the Audit and Financial Investigations Branch ensuring delivery of high-quality risk-based IT audit services across regulated in partnership with the Senior Manager the development and execution of the annual risk-based IT audit strategy and audit plan covering all the planning prioritization and delivery of both planned and ad hoc IT audit assignments ensuring alignment with evolving risk profiles and regulatory audit execution and project management activities including assignment of work review of audit activities and oversight of complex and high-profile refine and approve audit reports to ensure accuracy clarity completeness and appropriate tailoring for senior internal and external audiences including audit findings issues and recommendations to senior management and executive stakeholders including support for board-level reporting in partnership with senior and maintain strong stakeholder relationships across internal business units and external regulated entities to ensure effective audit execution alignment on regulatory expectations and acceptance of externally procured audit cybersecurity and forensic investigation service providers ensuring quality consistency and effective delivery of specialized assurance follow-up processes including review of management responses and tracking of remediation actions to ensure timely mitigation of identified regulatory and control leadership coaching and performance management to IT audit staff including hiring development planning training and ongoing performance oversight aligned with Branch to continuous improvement of audit methodologies practices and risk frameworks while promoting a strong risk culture and supporting enterprise risk management initiatives across the Have: Post-secondary education in Computer Science Engineering Business or a related field or an equivalent combination of education and relevant designation such as CPA CISA or an equivalent recognized designation or a combination of equivalent education and experience.A minimum of 68 years of internal or external audit experience preferably within regulatory or complex operational environments including at least 3 years in a supervisory or leadership expertise in IT audit practices including cybersecurity frameworks (e.g. ISO 27001 NIST CSF) IT governance frameworks (e.g. COBIT ITIL) systems development life cycle (SDLC) cloud security and recognized internal audit standards (IIA ISACA COSO).Demonstrated experience leading or conducting risk assessments of complex IT environments internal controls and operational -depth knowledge of regulated gaming systems including iGaming platforms and Ontarios regulated gaming environment (land-based gaming internet gaming lottery horse racing charitable gaming electronic raffle (50/50) and cannabis).Strong understanding of applicable Ontario gaming legislation regulatory standards and policy frameworks including the Gaming Control Act and Registrars with audit and project management methodologies including managing multiple concurrent audits and contributing to annual audit or assurance understanding of Ontarios gaming regulatory ecosystem including key industry stakeholders such as iGaming Ontario (iGO) and the Ontario Lottery and Gaming Corporation (OLG) and their relationship with the to work in Canada and the ability to successfully complete a criminal background check. Nice to Have:Knowledge of corporate governance frameworks and applicable legislation including the Ontario Corporations Act and related regulatory of the AGCOs mandate strategic priorities and organizational knowledge of gaming and related sectors including land-based gaming iGaming horse racing and cannabis retail operations in to interpret and assess financial statements within a regulated gaming or audit context.