Audit Manager, Internal Audit, Data, AI, Third Party and Project Risk

Location: Toronto, ON; hybrid work arrangement with 1–3 days per week on-site and the remaining days remote. Candidates must be legally eligible to work at the specified location and, where applicable, hold a valid work or study permit.

Company

CIBC is a relationship-oriented bank focused on helping clients and creating an inclusive, collaborative workplace.

What you will do

• Participate in or manage risk-based audits within the Data, AI, Third Party and Project Risk portfolio, maintaining quality within defined plans and budgets.
• Test controls, report audit results, continuously monitor management’s control environment, and validate corrective actions and remediation evidence.
• Provide consultation and execute procedures covering Data Governance, AI Governance, Third Party Risk, Records Management and Project or Change Risk.
• Communicate risk and control trends, audit findings and review results to Internal Audit management, senior management and stakeholders.
• Develop internal relationships through engagement updates and advice on risk, controls and regulatory matters.

Requirements

• 2–3 years of audit experience with knowledge of audit practices, procedures and principles, including control testing, risk assessment and clear file documentation.
• Ability to analyze client operations, identify and evaluate key risks, determine appropriate audit approaches, and write clear, concise and comprehensive reports for senior leadership.
• Knowledge or certification, or equivalent, in at least one relevant area: Data, including DCAM; AI, including NIST AI Risk Management Foundations or AAIA – Advanced in AI Audit; Third Party Risk, including Certified Third Party Risk Professional; or Project Management, including Project Management Professional.
• Strong critical thinking, analytical thinking, audit management, internal controls, operating effectiveness, risk-based auditing, risk management and mitigation skills.
• Ability to communicate clearly and influentially in writing and verbally, collaborate effectively, and manage stakeholder relationships.
• Willingness to use Data Analytics or Artificial Intelligence to improve audit efficiency and effectiveness.
• Legal eligibility to work at the specified location and, where applicable, a valid work or study permit.

Nice to have

• Exposure to Data Governance, Data Management, AI Governance, Records Management, Third Party Risk, or Project Risk processes and controls.
• CISA certification.

Culture & Benefits

• Hybrid work arrangement with flexibility to manage work activities.
• Competitive salary, incentive pay, banking benefits and a benefits program.
• Defined benefit pension plan, employee share purchase plan and vacation offering.
• Wellbeing support and a social, points-based recognition program.
• Inclusive workplace, accessible candidate experience, collaborative culture and Purpose Day paid time off for growth and development.

Hiring process

• An attribute-based assessment and other skills tests may be required, including simulation, coding or French proficiency assessments.
• Artificial intelligence tools may be used during the recruitment process.