Consultant, Governance and Controls

Location: Toronto, ON; hybrid arrangement with 1–3 days per week on-site

Company

A relationship-oriented banking organization providing financial services and enterprise security and risk management capabilities.

What you will do

• Support quarterly SOX and non-SOX technology control testing across applications, infrastructure, and related components.
• Gather appropriate evidence, document test results, and communicate control deficiencies to governance and risk leadership.
• Prepare risk assessment packages and coordinate with relevant stakeholders to collect required audit artifacts.
• Participate in meetings with Internal Audit and the external audit firm as technology controls are presented.
• Investigate compliance and operational control issues, assess risks, and recommend corrective actions.
• Document research, analysis, calculations, models, plans, reports, findings, and conclusions for decision-making.

Requirements

• 3+ years of experience in technology audit, controls, and governance, including identifying gaps, assessing controls, and recommending improvements.
• Working knowledge of the organization’s Control Framework requirements.
• Current accreditation and good standing as a CISSP or CISA-certified professional.
• Strong problem-solving, critical-thinking, analytical, communication, and relationship-building skills.
• Collaborative approach and ability to work with internal and external stakeholders.
• Legal eligibility to work in Canada is required; a valid work or study permit may be required where applicable.

Culture & Benefits

• Hybrid work arrangement with flexibility to manage work activities.
• Competitive salary and incentive pay.
• Banking benefits, employee benefits program, and defined benefit pension plan.
• Employee share purchase plan, vacation offering, wellbeing support, and points-based recognition program.
• Paid Purpose Day for personal growth and development.
• Inclusive and accessible work environment focused on trust, teamwork, accountability, and collaboration.

Hiring process

• Security checks, including a criminal record check, must be successfully completed before starting; an annual check may also be required.
• An attribute-based assessment or other skills tests may be requested, including a French proficiency assessment where applicable.
• Artificial intelligence tools may be used during recruitment.