Senior Manager IT SOX
- Toronto, ON, Canada
Hybrid
$130,000 to $160,000 CAD / year · Full-time
Applications open in a new tab.
Job details
- Pay
- $130,000 to $160,000 CAD / year
- Job type
- Full-time
- Workplace
- Hybrid
- Apply by
- Experience
- 8+ years of progressive experience across IT SOX/ICFR, IT audit, technology risk, or information security
- Posting language
- English
- Posted
Original job description
Required Skills & Experience
Experience & Seniority
- 8+ years of progressive experience across IT SOX/ICFR, IT audit, technology risk, or information security
- Must already be operating at the Senior Manager level or an equivalent
- Deep, hands-on IT SOX/ICFR expertise rather than general familiarity or primarily testing/execution experience
- Demonstrated ability to independently make complex risk and control judgment calls
IT SOX Expertise
Deep knowledge of:
- IT General Controls (ITGCs)
- IT Application Controls (ITACs)
- SOX/ICFR technology scoping
- Control design and effectiveness
- IT controls testing methodologies
- Deficiency/issue management
- Remediation
- SOC 1 reports and third-party considerations
- Executive-level controls reporting
Nice to Have Skills & Experience
- CISA, CGEIT, CIA or comparable Technology/Internal Audit certification
- Professional accounting designation
- Banking or financial-services experience
- Experience driving IT controls/process optimization
- Understanding of emerging AI-related control and technology risks
Job Description
The Senior Manager, IT SOX will lead the end-to-end technology component of the Global Controls Office's ICFR/SOX program.
This is a hands-on leadership role requiring deep IT SOX expertise, strong independent judgment, and the ability to operate credibly with senior stakeholders. The Senior Manager will oversee ITGCs, IT application controls, SOC 1/third-party considerations, technology scoping, control design, testing, issue management, remediation, and executive reporting.
A major differentiator is judgment. This individual will determine when systems should enter or exit SOX scope, critically evaluate IT controls and testing results, challenge potential auditor findings, guide accurate issue descriptions, and advise senior stakeholders on risk and remediation.
The Senior Manager will lead two tenured Managers and will personally participate in sensitive VP/AVP-level discussions requiring Senior Manager involvement.
Pay: $130,000 - $160,000 Annual Salary
Permanent Full-Time Position
Work Arrangement: Hybrid
Artificial intelligence tools are used to assist in screening and assessing applicants for this position.
Vacancy: This posting is for a currently vacant role, and the successful candidate will be hired into an existing open position.
More about this job
Responsibilities
Lead the technology component of the Global Controls Office’s ICFR/SOX program, overseeing ITGCs, application controls, technology scoping, control design and testing, SOC 1 and third-party considerations, issue management, remediation, and executive reporting. Lead two Managers and provide independent risk and control judgment, including scope decisions, auditor challenges, and advice to senior stakeholders.
Requirements
Requires at least 8 years of progressive experience in IT SOX/ICFR, IT audit, technology risk, or information security, with current Senior Manager-level or equivalent experience. Candidates need deep hands-on IT SOX/ICFR expertise and the ability to make complex control judgments independently; certifications, accounting credentials, financial-services experience, and AI risk knowledge are preferred.
Skills
- IT SOX/ICFR
- IT General Controls (ITGCs)
- SOX Technology Scoping
- Control Design and Effectiveness
- IT Controls Testing
- Deficiency and Issue Management
- Remediation
- SOC 1 Reports
- Third-Party Risk Considerations
- Risk and Control Judgment
- Executive Controls Reporting
- Technology Risk
- IT Audit
- Information Security
- Controls and Process Optimization
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Management & Leadership
- Finance & Accounting
- Security & Safety
- Consulting
Keywords
- IT SOX
- ICFR
- IT General Controls (ITGCs)
- SOX Technology Scoping
- Control Design
- Control Effectiveness
- IT Controls Testing
- Deficiency Management
- Issue Management
- Remediation
- SOC 1 Reports
- Third-Party Considerations
- Technology Risk
- IT Audit
- Information Security
- Executive Reporting
- CISA
- CGEIT
- CIA
- Professional Accounting Designation
- Financial Services
- Controls Optimization
- AI-Related Control Risks
- Auditor Findings