Director, control testing

Join our Global Technology Governance & Control team!

We are the first line of defense in our organization, focused on managing and mitigating risk. We partner with leadership to develop risk culture, define strategy, and deliver the tools, insights, and expertise needed to make confident, risk‑aware decisions. Our work supports the broader Technology and Enterprise strategies - and we’re transforming!

We are building a shared service Line 1B function that performs control testing on behalf of Line 1. The team provides objective, risk‑based testing across cybersecurity, infrastructure, cloud, data platforms, and operational technology domains. This work strengthens first‑line accountability, enhances transparency, and supports alignment with regulatory expectations, including the OSFI E‑21 Operational Risk and Resilience Guideline.

You’ll help shape this new function and influence how Global Technology understands control performance and manages technology and cyber risk. You will assist the Senior Director of Controls Testing, to develop and lead the program across the Technology Function globally driving and improving our Line 1 program. This role is a people leader responsible for managing team members.

• Assist in building the Control Testing Team program in alignment with the Company’s methodology.
• Direct standardized, risk-based Line 1 control testing across technology domains.
• Supervise multiple engagements and guide the testing team on appropriate scoping, sampling, test procedure development, evidence evaluation, issue identification, and retesting in accordance with Line 1 testing standards.
• Deliver high quality reporting and thematic analysis.

• Provide deep expertise in a specific technology control domain, standardize the testing approach, and share cross segment findings to ensure a consistent, high quality control testing approach.

• Identify, evaluate, and leverage automation, analytics, and AI enabled tools to improve depth, coverage, and consistency of testing.
• Find opportunities for continuous monitoring and streamline testing processes. Champion the shift from manual, point in time processes.

• Contribute to weekly and monthly reporting, including scorecards, dashboards, and key operational metrics.

• Represent the team in global forums, leadership meetings, offsite, and conferences - sharing insights and shaping strategy.

• Strategic problem solver who’s passionate about risk and capable of building a team that delivers results.
• 10+ years of progressive experience in Audit, Technology Risk, Information Security, Operational Risk, and Business Resiliency, within a global financial services organization.

• Professional designation (e.g., CPA, CIA, CISA) and university degree or equivalent experience in Computer Science, Information Technology, Business, or related field.
• Demonstrated ability to assess business processes and their risk implications, and make practical, beneficial recommendations.
• Expertise with key control frameworks and their application to technology environments.
• Excellent project management skills and ability to work independently while guiding others' work quality.
• Experience with data analytics to improve testing coverage and efficiency.
• Hands‑on experience with GRC tools (Archer preferred), Co‑Pilot and Power BI.
• Ability to harness data lakes, Python, and Gen AI to enhance testing would be an asset.
• Expertise in risk methodologies, control design, and audit standards.
• Outstanding verbal and written communication skills - you can simplify complexity and tell compelling stories with data.
• Comfortable working across global time zones and navigating diverse collaborator environments.

• Leadership & Influence:
  You inspire confidence, guide teams, and influence outcomes across all levels.
• Stakeholder Engagement:
  You build trust, align priorities, and manage expectations with finesse.
• Critical Thinking:
  You connect dots, anticipate risks, and think several…