Senior Manager, Security and Infrastructure Audit

We are seeking a dynamic technical expert capable of managing projects, solving complex problems, simplifying solutions, and inspiring and upskilling the team. The role focuses on evaluating Shopify's risk management for their advanced IT systems, offering a unique opportunity to work in a flexible audit environment where expertise, innovation, and unconventional approaches are highly valued.

Responsibilities:

• ERM program

  • Collaborate with RnD teams across Shopify to understand and assess impact of technical decisions on information technology risks and business risks

  • Contextualize risk information in a manner that is easily consumable by stakeholders, and facilitates communication of findings.

• Internal audit projects

  • Simultaneously lead and manage multiple technical audit projects and consulting engagements related to cybersecurity and technical infrastructure, setting the pace and accountability for the team to deliver work with high quality and within timelines

  • Ensure that all work is supported by clearly defined value-based project plans, is effectively executed with strong stakeholder engagement, and is supported by audit reports that drive change.

• Continuous learning

  • Stay on top of industry trends, emerging technologies, and changes in IT audit and data analytics practices to continuously improve the internal audit function.

  • Mentor team members and teach internal audit principles to upskill resources across the team on IT knowledge, expanding team capacity for IT audit and data analytics.

  • Lead the development of automation tooling to support continuous monitoring of critical IT and business transactions and system health.Qualifications:

Qualifications:

• Bachelor's degree or equivalent in a relevant field such as computer science, information systems, or business administration.

• Proven experience performing assurance and advisory projects relating to Information Technology with particular emphasis on system implementations, artificial intelligence and machine learning, technical security configurations, and cloud to cloud migrations.

• Experience evaluating IT, security and application controls in the context of a compliance program for a company with a high volume of transactions, of similar size and complexity to Shopify.

• Hands-on experience building data analytics and reporting solutions in SQL and one of or both of Python or R in the context of assurance and advisory projects

• Strong knowledge of industry risk and compliance frameworks such as NIST, ISO, SOX, SOC, and PCI-DSS.

• Excellent analytical and problem-solving skills, with the ability to think strategically and identify innovative solutions to complex challenges.

• Strong project management skills, with the ability to prioritize and manage multiple initiatives simultaneously using agile project management methodologies.

• Exceptional communication and interpersonal skills, with the ability to effectively collaborate with stakeholders.

• Self-motivated and adaptable, with a strong drive for continuous learning and professional growth.