Audit Manager, Technology

About the Role

We’re building a relationship-oriented bank for the modern world. At CIBC, we embrace your strengths and your ambitions, empowering you to make a meaningful impact while being truly valued for who you are and what you contribute.

Responsibilities

• Develop, execute, and ensure timely completion of a risk-based IT audit plan and procedures to meet high standards of accuracy, completeness, rigor, and alignment with regulatory and industry standards.
• Evaluate audit findings, prepare audit reports, and provide value-added recommendations to senior management to improve the organization’s information technology in the United States.
• Coach and mentor staff and seniors on IT audits while building relationships with senior management.
• Understand technology and business processes to identify key controls for audit engagements, finalize scope, and develop testing strategies for team members.
• Manage multiple team members on audit engagements, identify deficiencies, and draft issue language by addressing root causes of control weaknesses.
• Assist management in developing appropriate action plans with limited oversight.
• Lead and support the execution of technology and applications audits (e.g., Access Management, Change Management, Incident Management, Technology Governance, Infrastructure Management, SDLC audits) and integrated audits.
• Collaborate with audit management and team members to plan and execute risk-based audits.
• Identify, assess, and test the design and operating effectiveness of IT general controls within various business processes and integrated audits.
• Contribute to a positive, team-oriented culture by maintaining cooperative relationships, facilitating conflict resolution, sharing information, and accepting and providing feedback.
• Manage special projects as requested by management.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Finance, or a related field. Advanced degrees or certifications (e.g., MBA, MSc in Cybersecurity) are advantageous.
• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified in Risk and Information Systems Control (CRISC), AWS Certified Solutions Architect, or Microsoft Certified: Azure Security Engineer are highly preferred.
• 6-8 years of extensive experience in planning and executing SOX and/or IT audits, including Access Management, Change Management, SDLC, ITGC, and integrated audits.
• Ability to travel up to 5%.
• Alignment with CIBC’s values: trust, teamwork, and accountability.

Work Arrangement

You’ll have the flexibility to manage your work activities within a hybrid work arrangement, spending 2+ days per week on-site (NY-New York, 300 Madison Ave Fl 6) and other days remotely.

Pay

This role has an expected salary range of $120,000 USD - $150,000 USD, based on experience, qualifications, and location. The successful candidate may also be eligible to participate in the relevant business unit’s incentive compensation plan, which may include a discretionary bonus component.

Benefits

• Medical, Dental, Vision, and Health Savings Account coverage.
• Life Insurance, Disability, and Other Insurance Plans.
• Paid Time Off, including Sick Leave, Parental Leave, and Vacation.
• Holidays and 401(k) retirement plan.
• MomentMakers: a social, points-based recognition program.
• Banking benefits and wellbeing support.
• Purpose Day: a paid day off dedicated to your growth and development.

*Subject to plan and program terms and conditions.