Director, Control Testing

*** Nous utilisons des
* * pour fournir des statistiques qui nous aident à vous offrir la meilleure expérience sur note site. Vous y trouverez des renseignements sur les témoins, ou vous pouvez les désactiver si vous préférez. Toutefois, en continuant d’utiliser le site sans modifier les paramètres, vous consentez à notre utilisation de
*** Join our Global Technology Governance & Control team!

We are the first line of defense in our organization, focused on managing and mitigating risk. We partner with leadership to develop risk culture, define strategy, and deliver the tools, insights, and expertise needed to make confident, risk-aware decisions. Our work supports the broader Technology and Enterprise strategies — and we’re transforming!

We are building a shared service Line 1B function that performs control testing on behalf of Line 1. The team provides objective, risk‑based testing across cybersecurity, infrastructure, cloud, data platforms, and operational technology domains. This work strengthens first‑line accountability, enhances transparency, and supports alignment with regulatory expectations, including the OSFI E‑21 Operational Risk and Resilience Guideline.
*
* Position Responsibilities:

** You’ll help shape this new function and influence how Global Technology understands control performance and manages technology and cyber risk. You will assist the Senior Director of Controls Testing, to develop and lead the program across the Technology Function globally driving and improving our Line 1 program. This role is a people leader responsible for managing team members.
** Build and Oversee a Risk‑Based Control Testing Program
*** Assist in building the Control Testing Team program in alignment with the Company’s methodology.
* Direct standardized, risk-based Line 1 control testing across technology domains.
* Supervise multiple engagements and guide the testing team on appropriate scoping, sampling, test procedure development, evidence evaluation, issue identification, and retesting in accordance with Line 1 testing standards.
* Deliver high quality reporting and thematic analysis.
** Leads a Domain Competency Center
*** Provide deep expertise in a specific technology control domain, standardize the testing approach, and share cross segment findings to ensure a consistent, high quality control testing approach.
** Modernize Control Testing
*** Identify, evaluate, and leverage automation, analytics, and AI enabled tools to improve depth, coverage, and consistency of testing.
* Find opportunities for continuous monitoring and streamline testing processes. Champion the shift from manual, point in time processes.
** Keep Us on Track:
*** Contribute to weekly and monthly reporting, including scorecards, dashboards, and key operational metrics. Be a Global Voice:
* Represent the team in global forums, leadership meetings, offsite, and conferences — sharing insights and shaping strategy.
*
* Required Qualifications:

*** Strategic problem solver who’s passionate about risk and capable of building a team that delivers results.
* 10+ years of progressive experience in Audit, Technology Risk, Information Security, Operational Risk, and Business Resiliency, within a global financial services organization.
*
* Preferred Qualifications:

*** Professional designation (e.g., CPA, CIA, CISA) and university degree or equivalent experience in Computer Science, Information Technology, Business, or related field.
* Demonstrated ability to assess business processes and their risk implications, and make practical, beneficial recommendations.
* Expertise with key control frameworks and their application to technology environments.
* Excellent project management skills and ability to work independently while guiding others' work quality.
* Experience with data analytics to improve testing coverage and efficiency.
* Hands-on experience with GRC tools (Archer preferred), Co-Pilot and Power BI.
* Ability to harness data lakes, Python, and Gen AI to enhance testing would be an asset.
* Expertise in risk methodologies, control design, and audit standards.
* Outstanding verbal and written communication skills — you can simplify complexity and…