Senior Audit Manager, Data and AI Risk

What you’ll be doing 

As the Senior Audit Manager, Data and AI Risk, you are expected to be a Subject Matter Expert with expertise in Data governance and management, Records Management and AI audit, risk & controls. This includes areas such as Data governance, Artificial Intelligence (AI) Governance, risk management, operations and services across multiple lines of business. You'll support Internal Audit teams by providing consultation and developing work programs to ensure comprehensive coverage of Data risk within the audit universe, as well as providing guidance and training. You will participate in various audits and regulatory reviews, performing and documenting your work in accordance with CIBC Internal Audit methodology. You will be accountable for the quality of audit procedures and documentation you prepare. This role reports to the Director, Data and AI Risk, Internal Audit. 

At CIBC we enable the work environment most optimal for you to thrive in your role.  You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 2-3 days per week on-site, while other days will be remote. 

 How you’ll succeed 

• Audit Strategy and Annual Planning – Contribute to the development of the Internal Audit Strategy for Data risk and AI, including audit planning activities. Additionally, participate in the annual update of risk assessment guidance for Data risk and provide constructive challenge to the risk assessments completed by other Internal Audit teams.

• Deliver and Support Data and AI Audits – Lead and perform audits and targeted reviews in Data Governance and Management, Records Management, and AI Governance. Demonstrate expertise in data ownership and stewardship, data quality management, metadata management, data lineage, traceability, data classification, retention policies, access controls, and regulatory compliance. Apply advanced knowledge of data lifecycle management, data architecture and modeling, data integration and interoperability, and data storage solutions across cloud and on-premises environments, with strong proficiency in records management and disposition and in governing internal and external data sharing (including data sharing policies, data contracts and usage agreements, and interface standards/APIs etc.). Provide consultation and guidance to Internal Audit teams on AI Governance, including model risk management, AI/ML lifecycle controls, ethical AI principles, algorithm transparency and explainability, data bias detection and mitigation, and AI regulatory compliance, as well as monitoring and auditing AI systems and managing third-party AI risks in cloud and outsourced environments. Train and guide Internal Audit teams on implementing and assessing controls and requirements for Data Governance, Data Management, Records Management, and AI Governance across business and technology applications, infrastructure, and services. 

• Continuous Monitoring and Regular Reporting – Communicate trends in risk and control issues to Internal Audit executives, and contribute to senior management reporting through Data risk dashboards and summary reports. 

• Data Analytics and Artificial Intelligence – Contribute to Data Analytics (DA) and AI-related initiatives aimed at transforming audit practices through automation and continuous auditing, in collaboration with the Internal Audit DA/AI team.

• Leadership – Demonstrate the ability to influence without formal authority; depending on the initiative, you may be required to take the lead in managing and collaborating with stakeholders. 

Who you are 

• You can demonstrate experience in having a broad and deep knowledge and understanding of risks associated with Data Governance, Data Management, AI Governance and Records Management processes, services and tools, regulatory requirements, and best practices in controls. You will also have knowledge of auditing practices, procedures and principles that enable you to analyze client operations, assess risks, and select the most suitable audit approach. You must have proven ability to write comprehensive and concise reports used by senior leadership. 

• You’re a certified professional. You have a current accreditation in one of the following (or equivalent): In-depth knowledge or certification in Data Governance such as DCAM (Data Capability Assessment Maturity), CDMP (Certified Data Management Professional), NIST AI Risk Management Foundations, AAIA – Advanced in AI Audit, CISA - Certified Information Systems Auditor. 

• You understand that success is in the details. You notice things that others don't. Your critical thinking skills help to inform your decision making. 

• You're driven by collective success. You know that collaboration can transform a good idea into a great one. You understand the power of an inclusive team that enjoys working together to bring a shared vision to life. 

• You embrace and champion change. You'll continuously evolve your thinking and the way you work to deliver your best, e.g., using Data Analytics or Artificial Intelligence for audit efficiency and effectiveness. 

• Values matter to you. You bring your real self to work, and you live our values – trust, teamwork and accountability 

#LI-TA