Director, Internal Audit - IT Services and Corporate Services

Take a central role

The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in an organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in our environment. 

Building on the principles that have always guided us – excellence, integrity and respect – we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.  

With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers:  Working Here - Bank of Canada

Find out more about the next steps in our Recruitment process. 

What you will do
As a member of Audit’s leadership team, you will be a recognized expert in governance, risk, and controls for the Information Technology Services and Corporate Services portfolios. You will develop and maintain relationships with business unit management that will help you identify assurance and advisory needs for your clients, prioritize and resource engagements accordingly, and lead a team of auditors who strive to provide meaningful insights within and outside of formal engagements. You’ll support the development of the risk-based audit plans and manage the day-to-day execution of audit activities. You will be accountable for all aspects of each audit, from the planning to completing the reporting. 

In addition, you will:

• nurture a positive organizational climate, collaboration across teams, and the advancement of work environment initiatives
• support training and development planning for the team to support their development as well as the delivery of the audit plan
• allocate resources to advance Audit’s quality assurance and improvement program and oversee the adoption of new tools, practices, and competencies by their respective teams to ensure adherence to professional standards and departmental practices 
• contribute to the strategic direction of the Audit function and lead tactical and operational plans to transform Audit
• manage client relationships with all levels of management, up to and including the managing director, within assigned business units to ensure a deep understanding of business unit operations and constraints to shape sound audit judgement
• lead the identification of issues requiring escalation for consultation/action to client and Audit department management as well as oversee the related research and document preparation 
• represent Audit on initiatives or governance bodies related to assigned business units
• analyse themes, trends, and other patterns related to audit and advisory activity outcomes and reporting in order to identify key strategic actions for management to consider

What you need to succeed

• broad knowledge of IT systems and infrastructures under a variety of deployments including cloud, on-premises, and hybrid models, as well as related information and cybersecurity risks and controls
• understanding of key IT concepts and architectures, as well as operating and supporting processes, including at application, database, and operating system levels
• demonstrated strategic foresight and influencing skills
• leadership/management experience of a diverse range of professionals, with the ability to motivate staff through change and deliver results
• excellent communication skills – both verbal and written; demonstrated experience in being clear and convincing with employee groups and executive staff levels on a broad range of issues
• ability to lead initiatives from the idea stage through to implementation
• knowledge of governance, risk management and control frameworks (e.g., COSO), IT general computer controls and operational and project management controls, including control frameworks such as Control Objectives for Information and Related Technologies (COBIT), Information Technology Infrastructure Library (ITIL), National Institute of Standards and Technology (NIST) and/or Project Management Body of Knowledge (PMBOK)

Nice-to-have

• an understanding of the Bank’s functions, its governance and administrative framework, and its risk-management and control practices and/or experience with financial institutions
• knowledge of emerging areas (e.g., third party risk management, cloud security, data governance, innovation, artificial intelligence and machine learning, big data, zero trust)
• in-depth knowledge of information systems and/or business control end-to-end auditing processes 
• using data analytics/visualization to support audit activities and/or audit reporting
• experience in presenting to and/or working with senior management
• knowledge of the International Standards for the Professional Practice of Internal Auditing

Your education and experience
This position requires a university degree in business, computer science or engineering with a minimum of seven years of direct work experience in auditing or providing advisory services to projects, systems and/or operations. An equivalent combination of education and experience may be considered. 

It also requires a professional accreditation in one or more of the following disciplines focused on IT/security auditing, risk management or controls, such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Chartered Professional Accountant (CPA), Certified Information Systems Security Professional (CISSP), Certified in the Governance of Enterprise IT (CGEIT), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certification in Risk Management Assurance (CRMA), or Certification in Control Self-Assessment (CCSA).

What you need to know

• Language requirement: English and French essential (bilingual) with a minimum starting level of functional (level 4) in second official language. Training may be provided to help reach the required level of fully functional (level 5) in second official language.
• Priority will be given to Canadian citizens and permanent residents
• Security level required: Be eligible to obtain Secret 
• Relocation assistance may be provided, if required
• Please save a copy of the job poster. Once the closing date has passed, it will no longer be available.

Hybrid Work Model

The Bank offers work arrangements that provide employees with flexibility, enable high-performing teams, and support an excellent workplace culture. Most employees can telework from home for a substantial part of each month as part of the Bank`s hybrid work model, and they are expected on site at the Bank location a minimum of eight days per month to help build connections between colleagues. You must live in Canada, and within reasonable commuting distance of the office.

What you can expect from us
This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider. 

• Salaries are based on qualifications and experience and typically range from $147,752 to $173,825 (job grade 19)
• The Bank offers an incentive for successfully meeting expectations at  7 to 10% of your base salary. The Bank offers additional performance pay (5%) for those who exceed expectations. Exceptional performers who far exceed expectations may be eligible for higher performance pay.
• Flexible and comprehensive benefits so you can choose the level of health, dental disability and life and/or accident insurance coverage that meets your needs
• Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
• Indexed, defined-benefit pension

We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.