LOG IN
SIGN UP
Canary Wharfian - Online Investment Banking & Finance Community.
Sign In
Forgot password?
Don't have an account?
or
Join Canary Wharfian
By signing up, you agree to our Terms & Conditions and Privacy Policy.
or

Manager - Technology Risk - Assurance - Toronto

ExperiencedNo visa sponsorship
Ernst & Young logo

at Ernst & Young

Big Four

Posted 14 days ago

No clicks

**Job Title:** Cybersecurity Specialist - Toronto **About the role:** The Cybersecurity Specialist will be responsible for analyzing, evaluating, and improving the security posture of our clients. You will work collaboratively with our cybersecurity teams and clients to create secure and resilient environments that protect against cyber threats. This role offers the opportunity to work on high-impulse projects, drive innovation, and contribute to our high-performing teams. **Responsibilities:** - Develop, implement, and maintain cybersecurity solutions that meet client objectives, comply with regulations, and align with industry best practices. - Collaborate with clients, understand their unique challenges, and provide strategic guidance to help them manage cybersecurity risks effectively. - Lead cybersecurity projects, perform security assessments, and stay current with evolving security trends and threats. - Assist in the creation and maintenance of security policies, procedures, and guidelines. - Train and educate clients on security best practices, trends, and risks. - Troubleshoot security issues and resolve incidents as they arise. **Qualifications:** - Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field. - Proven experience (3+ years) in cybersecurity roles, with a_valid certification such as CISSP (preferred). - Strong knowledge of security frameworks, standards, and best practices (e.g., ISO 27001/2, NIST, CIS Top 20, etc.). - Experience in one or more of the following areas: identity and access management, network security, incident response, security information and event management (SIEM), cloud security, or risk management. - Excellent communication, presentation, and leadership skills. - Familiarity with cybersecurity tools and software

Compensation
$100,000 – $140,000 CAD

Currency: $ (CAD)

City
Toronto
Country
Canada

Full Job Description

At EY, were all in to shape your future with confidence.

 

Well help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

 

Join EY and help to build a better working world. 

 

The opportunity


EY is seeking a Manager to join our Technology Risk team. This professional will manage engagement teams, as well as directly assist clients in employing information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will also work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other IT professionals in performing information technology (IT) control and security engagements.

 

This professional will also be expected to interact with other members of the core Assurance and Business Consulting service lines and potentially touch upon topics such as cyber security, IT risk assessments, privacy assessments, technology selections and implementations, data analysis and many other issues our clients deal with.

 

This job posting relates to an existing vacancy within our organization.

 
Your key responsibilities

  • External audits: Oversee engagements to test and opine on efficacy of IT general controls (ITGCs) and IT application controls (ITACs) to support financial statement audits / integrated audits (Internal Controls for Financial Reporting)
  • Internal audits/SOX compliance testing: assist clients in designing and implementing ITGCs and ITACs to support SOX compliance. Assist testing of ITGCs and ITACs to confirm efficacy of controls. Lead internal audit / assessment engagements for clients to help confirm alignment with leading cybersecurity practices (NIST CSF, ISO 27001, etc.)
  • Service organization reporting Focus on the issuance of third-party reports in the form of 3416 reports, SOC 1, SOC 2 reports, etc.
  • Provide high-quality professional day-to-day management of internal/external audit engagements/projects and understand EYs practices and broader service offerings and identify potential opportunities to improve such service offerings
  • Lead and support on-site coordination role for clients including planning, briefing team on the client's IT environment and industry IT trends, communicating with the clients and completing audit engagements
  • Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.
  • Prepare IT reports on the adequacy and effectiveness of control structure, along with practical recommendations to improve the effectiveness, efficiency of a control or process.
  • Able to discuss and resolve audit issues and recommendations with client management.
  • Demonstrate a thorough understanding of complex information systems and apply it to client situations
  • Lead and provide relevant support to the teams of senior consultants and consultants, including delivering formal IT Audit related trainings.
  • Maintain long-term client relationships and networks as well as cultivate business development opportunities.
  • Support the growth and delivery of the Technology Risk practice by identifying client needs, developing technology risk and controls solutions, and collaborating with Assurance and other EY teams on new and evolving reporting requirements.
  • Manage engagement quality, economics, timelines, and risks, ensuring deliverables align with EY methodology and client expectations.
  • Build trusted relationships with client executives and key stakeholders, providing practical insights on technology risks, control gaps, and remediation priorities.
  • Identify and develop new business opportunities by connecting client needs with EYs broader assurance, technology risk, and consulting capabilities.
  • Coach and develop Senior and Staff through effective delegation, timely feedback, technical guidance, and on-the-job learning.
  • Contribute to the evolution of the Technology Risk practice through innovation, market-facing initiatives, methodology development, and adoption of data and AI-enabled approaches.

 

Skills and attributes for success

  • Highly professional with ability to work in challenging, diverse and evolving client environments
  • Flexible with the ability to learn quickly and leverage skills in new situations
  • Excellent verbal and written communication skills
  • The ability to build strong client relationships
  • Strong team working skills are essential
  • Strong presentation and facilitation skills
  • A passion to contribute to the growth of the practice
  • Strong experience interacting with clients at all levels including Staff, Leadership and Partners Strong written, communication, and presentation skills.
  • Ability to coach and mentor junior staff on engagements.

 

Ideally, youll also have

  • Bachelors Degree (or higher) in Business Administration, Commerce, Computer Science, Management Information Systems, or other relevant program required.
  • A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits (e.g., Internal Controls for Financial Reporting, SOX, SOC reporting)
  • Relevant professional designation, such as CISA, CPA, CIA, CISSP, CISM, or eligible to obtain relevant designation
  • Comprehensive knowledge of internal auditing standards and techniques;
  • Strong analytical, interpersonal and communication skills;
  • Demonstrated consistency in values, principles and work ethic;
  • Proficiency using MS Office Suite including Excel, Word, OneNote and PowerPoint
  • Demonstrated integrity, values, principles, and work ethic
  • Big 4 / IT risk consulting experience will be considered an asset
  • Demonstrated knowledge of ERP platforms such as SAP, Oracle, etc. would be an asset

 

What we look for

 

As an ambassador for the Technology Risk team, you will need to build a strong network internally and be able to exceed our clients' high expectations. We are seeking high-performing individuals who have been recognized for exceeding expectations. Were interested in highly motivated, talented individuals who demonstrate curiosity, a willingness to learn, and a strong ability to think outside the box. You can expect plenty of autonomy in this role, so youll need the motivation to take initiative, embrace data and AI-enabled ways of working, and seek out opportunities to improve our current relationships and expand our business in the evolving market. If youre ready to take on some of our clients most complex technology risk and assurance issues, this role is for you.

 

What we offer you

 

We offer a competitive compensation package where youll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

    • Support and coaching from some of the most engaging colleagues in the industry
    • Learning opportunities to develop new skills and progress your career
    • The freedom and flexibility to handle your role in a way thats right for you

 

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

    • Toronto: $100,000 to $140,000


Are you ready to shape your future with confidence? Apply today.

 

To help create the best experience during the recruitment process, please describe any accommodations you may need.

 

Inclusiveness at EY 

 

Inclusiveness is at the heart of who we are and how we work. Were committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Mtis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world. 

 

Learn about our commitment to Inclusiveness at https://www.ey.com/en_ca/about-us/corporate-responsibility/equity 

 

EY | Building a better working world 

 

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

 

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

 

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

 

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with ethical principles and regulatory requirements.

 

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.

Manager - Technology Risk - Assurance - Toronto

Compensation

$100,000 – $140,000 CAD

City: Toronto

Country: Canada

Ernst & Young logo
Big Four

14 days ago

No clicks

at Ernst & Young

ExperiencedNo visa sponsorship

**Job Title:** Cybersecurity Specialist - Toronto **About the role:** The Cybersecurity Specialist will be responsible for analyzing, evaluating, and improving the security posture of our clients. You will work collaboratively with our cybersecurity teams and clients to create secure and resilient environments that protect against cyber threats. This role offers the opportunity to work on high-impulse projects, drive innovation, and contribute to our high-performing teams. **Responsibilities:** - Develop, implement, and maintain cybersecurity solutions that meet client objectives, comply with regulations, and align with industry best practices. - Collaborate with clients, understand their unique challenges, and provide strategic guidance to help them manage cybersecurity risks effectively. - Lead cybersecurity projects, perform security assessments, and stay current with evolving security trends and threats. - Assist in the creation and maintenance of security policies, procedures, and guidelines. - Train and educate clients on security best practices, trends, and risks. - Troubleshoot security issues and resolve incidents as they arise. **Qualifications:** - Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field. - Proven experience (3+ years) in cybersecurity roles, with a_valid certification such as CISSP (preferred). - Strong knowledge of security frameworks, standards, and best practices (e.g., ISO 27001/2, NIST, CIS Top 20, etc.). - Experience in one or more of the following areas: identity and access management, network security, incident response, security information and event management (SIEM), cloud security, or risk management. - Excellent communication, presentation, and leadership skills. - Familiarity with cybersecurity tools and software

Full Job Description

At EY, were all in to shape your future with confidence.

 

Well help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

 

Join EY and help to build a better working world. 

 

The opportunity


EY is seeking a Manager to join our Technology Risk team. This professional will manage engagement teams, as well as directly assist clients in employing information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will also work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other IT professionals in performing information technology (IT) control and security engagements.

 

This professional will also be expected to interact with other members of the core Assurance and Business Consulting service lines and potentially touch upon topics such as cyber security, IT risk assessments, privacy assessments, technology selections and implementations, data analysis and many other issues our clients deal with.

 

This job posting relates to an existing vacancy within our organization.

 
Your key responsibilities

  • External audits: Oversee engagements to test and opine on efficacy of IT general controls (ITGCs) and IT application controls (ITACs) to support financial statement audits / integrated audits (Internal Controls for Financial Reporting)
  • Internal audits/SOX compliance testing: assist clients in designing and implementing ITGCs and ITACs to support SOX compliance. Assist testing of ITGCs and ITACs to confirm efficacy of controls. Lead internal audit / assessment engagements for clients to help confirm alignment with leading cybersecurity practices (NIST CSF, ISO 27001, etc.)
  • Service organization reporting Focus on the issuance of third-party reports in the form of 3416 reports, SOC 1, SOC 2 reports, etc.
  • Provide high-quality professional day-to-day management of internal/external audit engagements/projects and understand EYs practices and broader service offerings and identify potential opportunities to improve such service offerings
  • Lead and support on-site coordination role for clients including planning, briefing team on the client's IT environment and industry IT trends, communicating with the clients and completing audit engagements
  • Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.
  • Prepare IT reports on the adequacy and effectiveness of control structure, along with practical recommendations to improve the effectiveness, efficiency of a control or process.
  • Able to discuss and resolve audit issues and recommendations with client management.
  • Demonstrate a thorough understanding of complex information systems and apply it to client situations
  • Lead and provide relevant support to the teams of senior consultants and consultants, including delivering formal IT Audit related trainings.
  • Maintain long-term client relationships and networks as well as cultivate business development opportunities.
  • Support the growth and delivery of the Technology Risk practice by identifying client needs, developing technology risk and controls solutions, and collaborating with Assurance and other EY teams on new and evolving reporting requirements.
  • Manage engagement quality, economics, timelines, and risks, ensuring deliverables align with EY methodology and client expectations.
  • Build trusted relationships with client executives and key stakeholders, providing practical insights on technology risks, control gaps, and remediation priorities.
  • Identify and develop new business opportunities by connecting client needs with EYs broader assurance, technology risk, and consulting capabilities.
  • Coach and develop Senior and Staff through effective delegation, timely feedback, technical guidance, and on-the-job learning.
  • Contribute to the evolution of the Technology Risk practice through innovation, market-facing initiatives, methodology development, and adoption of data and AI-enabled approaches.

 

Skills and attributes for success

  • Highly professional with ability to work in challenging, diverse and evolving client environments
  • Flexible with the ability to learn quickly and leverage skills in new situations
  • Excellent verbal and written communication skills
  • The ability to build strong client relationships
  • Strong team working skills are essential
  • Strong presentation and facilitation skills
  • A passion to contribute to the growth of the practice
  • Strong experience interacting with clients at all levels including Staff, Leadership and Partners Strong written, communication, and presentation skills.
  • Ability to coach and mentor junior staff on engagements.

 

Ideally, youll also have

  • Bachelors Degree (or higher) in Business Administration, Commerce, Computer Science, Management Information Systems, or other relevant program required.
  • A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits (e.g., Internal Controls for Financial Reporting, SOX, SOC reporting)
  • Relevant professional designation, such as CISA, CPA, CIA, CISSP, CISM, or eligible to obtain relevant designation
  • Comprehensive knowledge of internal auditing standards and techniques;
  • Strong analytical, interpersonal and communication skills;
  • Demonstrated consistency in values, principles and work ethic;
  • Proficiency using MS Office Suite including Excel, Word, OneNote and PowerPoint
  • Demonstrated integrity, values, principles, and work ethic
  • Big 4 / IT risk consulting experience will be considered an asset
  • Demonstrated knowledge of ERP platforms such as SAP, Oracle, etc. would be an asset

 

What we look for

 

As an ambassador for the Technology Risk team, you will need to build a strong network internally and be able to exceed our clients' high expectations. We are seeking high-performing individuals who have been recognized for exceeding expectations. Were interested in highly motivated, talented individuals who demonstrate curiosity, a willingness to learn, and a strong ability to think outside the box. You can expect plenty of autonomy in this role, so youll need the motivation to take initiative, embrace data and AI-enabled ways of working, and seek out opportunities to improve our current relationships and expand our business in the evolving market. If youre ready to take on some of our clients most complex technology risk and assurance issues, this role is for you.

 

What we offer you

 

We offer a competitive compensation package where youll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

    • Support and coaching from some of the most engaging colleagues in the industry
    • Learning opportunities to develop new skills and progress your career
    • The freedom and flexibility to handle your role in a way thats right for you

 

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

    • Toronto: $100,000 to $140,000


Are you ready to shape your future with confidence? Apply today.

 

To help create the best experience during the recruitment process, please describe any accommodations you may need.

 

Inclusiveness at EY 

 

Inclusiveness is at the heart of who we are and how we work. Were committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Mtis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world. 

 

Learn about our commitment to Inclusiveness at https://www.ey.com/en_ca/about-us/corporate-responsibility/equity 

 

EY | Building a better working world 

 

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

 

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

 

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

 

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with ethical principles and regulatory requirements.

 

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.