Loblaws

Director, Technology Assurance and Advisory

• The engagements span across the technology risk spectrum at Loblaw and the leader must have the technical depth, balance, knowledge of best practices and top industry risks and trends, to evaluate, monitor and improve the management of technology risk, across:
• Cyber-security, Privacy, and Penetration Testing, including knowledge of penetration testing frameworks
• System, network, and infrastructure optimization
• Data governance
• Data analytics and visualization
• System implementations, including cloud applications
• Deep understanding of the three lines of defense, including leading trends and practices in optimizing management of technology risk across large organizations
• Determine and lead the technology strategy and plan for assurance and advisory, based on enterprise technology risk exposure and priorities
• Partner with the technology team, second lines risk and compliance functions and external auditors to establish reliance between coverage of risk across the three lines of defense, including oversight of the 2nd Line initiatives, as needed
• Strong financial acumen, including deep understanding and knowledge of risk and control assessments supporting systems, including SAP ECC, application security and identity access management
• Deliver and present highly visual, creative, client-focused deliverables and presentations

• Versatile and business-minded leader, with a strong executive presence, who will proactively drive and own relationships across the Loblaw technology teams, business functions, including leaders and the Board, to liaison on strategic, assurance and advisory initiatives, including promoting the Risk Advisory brand and service offerings to ensure that we are adaptable to changing business needs and add value in the right direction
• Highly charismatic, invested, and trusted people leader, who will manage and lead the delivery teams, while mentoring team members through coaching, counselling, and leading by example
• Foster trusted business partnership by delivering thought leadership, actionable risk insight and intelligence to Senior Leadership and the Board

• A Bachelor's degree in Information Technology or a related field such as IT Systems, Computer Science, IT Management, Data Analytics or Engineering
• Strong technology and financial acumen, with one or more of the designations preferred:  Certified Information Systems Auditor (CISA), CPA, CISSP, CISM or CIA.
• 8+ years of experience, including 3+ years of leadership experience, in a combination of technology roles - preferred roles are systems design, solutions architect, technology consulting/ Big4 firms, internal audit, cyber-security, IT risk management.
• Knowledge of assurance, governance, risk and control frameworks including COBIT, ISF, NIST and ISO, Service Organization Controls (SOC) Reporting standards (e.g. CSAE 3416, Section 5025, AT 101) sufficient to provide subject matter expertise in applying IT risk and control concepts
• Experience auditing large enterprise IT implementations with knowledge of project methodologies (Agile, Iterative etc.) including project risks and controls
• Superior communication skills, and a demonstrated ability to effectively communicate with stakeholders at all levels (both written and verbal)
• Strong business acumen, with an ability connect the dots between the business strategy, tactics, risks, and control environment, with significant exposure to risk/control mindset & frameworks
• Proven problem-solver, with an innovative and entrepreneurial mindset and self-starter with a strong work ethic and ‘no-excuses' mentality

• Unique opportunity to join a large world-class team of risk advisory professionals with a proven industry leader
• Ongoing opportunities for learning and career development
• Ability to make an immediate impact on business leaders through projects and risk discussions
• A competitive compensation and benefits package
• Continuous learning through development reimbursement, in accordance with company policies
• Work Perks Program
• On-site gym, Basketball & Volleyball courts, Ice Rink, Groceries delivered to work via PC Express, Dry-Cleaning services (1 Presidents Choice Circle Office)