Reporting to the Vice President of IT Audit, the IT Audit Portfolio Manager will be responsible for overseeing the technology audit portfolio. This includes conducting audit assurance activities, project reviews, and providing risk advisory services to ensure that IT operations align with CTC’s risk appetite and strategic objectives. You will manage multiple concurrent audit engagements aimed at enhancing the overall risk/control environment of CTC.

What you'll do

• Annual Planning: Contribute to the annual planning process of IAS, ensuring adequate coverage of information technology and cyber risks
• Audit Execution and Delivery: Lead audits focusing on information technology and cybersecurity processes by developing and executing comprehensive audit plans. These plans should include objectives, scope, deliverables, approach, resourcing, and scheduling
• Risk Management: Assess whether risks related to IT and cybersecurity processes are appropriately managed through effective controls
• Reporting: Ensure audit conclusions and recommendations are well-supported by evidence. Prepare clear and concise audit reports
• Client Engagement: Discuss audit findings with clients and senior management. Identify significant issues within a business context and work with clients to develop feasible solutions
• Collaboration: Work with various audit teams on significant CTC projects. Address system development, implementation, and cybersecurity risks by assessing project solutions and security architecture
• Technical Expertise: Bring deep expertise in at least 1-2 areas of technology such as operating systems, databases, network devices, or cloud technologies. Leverage this specialized knowledge to provide critical insights and drive improvements in risk/control assessments
• Compliance Promotion: Advocate for compliance with CTC policies, procedures, standards, and guidelines
• Innovation and Insight: Utilize creativity and sound judgment to drive actionable insights from audit engagements. Identify innovative solutions that improve the overall risk/control environment
• AI Integration: Leverage artificial intelligence technologies such as large language models (LLMs) to enhance the efficiency and effectiveness of audit execution

What you bring

• 7+ years of IT audit or information technology experience with focus on cybersecurity or risk management
• University degree as well as CISA or CISSP or equivalent certifications are required. Other technology specific certifications are a plus
• Excellent working knowledge of audit, project management, and system development methodologies
• Experience in the assessment of threats and risks over IT and cybersecurity processes and systems
• Solid working knowledge and application of IT, cybersecurity, and service organization reporting control frameworks, specifically COBIT, NIST, and SOC (1 and 2)
• Knowledge of various industry regulations such as 52-109, PCI, PIPEDA, and GDPR
• Strong technical knowledge of various IT infrastructure and network components such as operating system (Windows, Linux), databases (Oracle), and network platforms
• Knowledgeable and experience in areas such as network security architecture, identity and access, threat and vulnerability, systems development security, data loss prevention, and endpoint protection
• Knowledge and experience of various security tools (IDAM, Vulnerability Assessment, EDR, SIEM etc.)
• Strong understanding of public cloud networking and network security controls on platforms such as Azure, GCP, AWS
• Excellent relationship management, time management, organization, planning, and process mapping skills
• Well-developed influential skills to resolve situations when there can be distinct differences of opinion between the client and the auditor
• Superior verbal and written communication skills sufficient to prepare and communicate audit reports dealing with facts and concepts for presentations to client executives and external auditors
• Committed too providing a customer focus and valued added service

#LI-AG2

About Us

Canadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With more than 90 Owned Brands, 1,700 retail locations, financial services, exemplary e-commerce capabilities, and exciting market-leading merchandising strategies. We dream big and work as one to innovate with purpose for our customers at every level of our business, investing in new technologies and products, and doubling down on top talent to drive the company forward. We offer competitive salaries and wages to CTC employees, as well as store discounts, supported learning through our Triangle Learning Academy, Canadian Tire Profit Sharing, and retirement and savings programs for eligible employees. As part of our enhanced flex benefits program, we offer mental health benefits in the amount of $5,000 per year for benefits-eligible employees and their families, including total well-being, and mental health tools and resources for all employees. Join us in helping to make life in Canada better through living and working our Core Values: we are innovators and entrepreneurs at our core, outcomes drive us, inclusion is a must, we are stronger together and we take personal responsibility. It is an especially exciting time to join CTC and its family of companies where career opportunities are wide-ranging! Join us, where there's a place for you here.

Our Commitment to Diversity, Inclusion and Belonging

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.

Accommodations

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.