Manager, IT/OT Cyber Assurance ( Energy & Industrials )

EY's people in more than 150 countries are committed to operating with integrity, quality and professionalism in the provision of audit, tax, transaction and consulting services. We strive to help all of our people achieve their professional and personal goals through an inclusive environment that values everyone's contributions, appreciates diversity of thought, fosters growth, and provides continuous opportunities for development. Recognized as one of Canada's top employers, EY continually strives to be a great place to work.

The opportunity

We are seeking an accomplished and motivated Manager to lead the delivery of our Cybersecurity Assurance services for Internal Audit customers across Canadian Energy and Industrial companies. This role is pivotal in driving the growth, management, and success of our cybersecurity services tailored for Internal Audit (IA) teams, particularly those dealing with the complexities of IT and Operational Technology (OT) environments.

The Manager will be responsible for evolving our service portfolio to meet market demands and ensuring the delivery of high-quality cybersecurity assessments. This role demands a strong leader who can balance business management with deep technical expertise, ensuring that our offerings not only meet but exceed the expectations of IA leaders across various sectors.

Your key responsibilities:

1. Practice Leadership and Management

• Business Development: Drive the growth of the Cybersecurity Assurance practice by developing strategic plans, identifying new business opportunities, and cultivating strong relationships with IA leaders in target industries.
• Team Leadership: Lead, mentor, and develop a team of cybersecurity professionals, fostering a culture of excellence, collaboration, and continuous learning.
• Financial Management: Contribute to the financial performance of the practice, including budgeting, forecasting, and ensuring profitability through efficient resource allocation and project management.
• Client Engagement: Serve as the primary point of contact for key clients, ensuring that their needs are met with tailored solutions that address their specific IA challenges related to IT/OT cybersecurity.

2. Portfolio Management and Development

• Service Evolution: Continuously assess and refine our service offerings to stay ahead of industry trends and client needs, particularly in areas like risk identification, audit planning support, assessment execution, and ongoing training for IA teams.
• Thought Leadership: Develop and contribute to thought leadership content, such as white papers, articles, and presentations, to position the practice as a leader in IA-focused cybersecurity.
• Innovation: Lead initiatives to integrate emerging technologies and methodologies into our service portfolio, ensuring that our offerings remain cutting-edge and relevant to IA leaders.

3. Delivery and Execution

• Project Oversight: Lead the delivery of cybersecurity assessments and related services, ensuring that projects are completed on time, within scope, and to the highest standards of quality.
• Client Solutions: Work closely with clients to understand their unique challenges and tailor assessments that provide actionable insights, helping IA teams identify, assess, and mitigate IT/OT cybersecurity risks.
• Quality Assurance: Implement and maintain rigorous quality control processes to ensure the accuracy, relevance, and impact of all deliverables.

4. Collaboration and Communication

• Cross-Functional Collaboration: Collaborate with other practice areas, including M&A, IT, and OT advisory teams, to deliver integrated solutions that address the broader needs of our clients.
• Stakeholder Communication: Effectively communicate with senior leadership, clients, and team members to ensure alignment on goals, expectations, and deliverables.
• Training and Development: Lead internal training initiatives to ensure that team members are equipped with the latest skills and knowledge needed to deliver exceptional services to IA clients.

Skills and Attributes for Success

• Experience: 5+ years of experience in internal audit, or cybersecurity, with at least 3 years doing both. Experience in IT/OT environments is highly desirable.
• Education: Bachelor’s degree in cybersecurity, information technology, business administration, or a related field. Advanced degrees are a plus.

Skills:

• Strong leadership and team management skills.
• Deep understanding of IA processes, particularly in the context of IT/OT cybersecurity.
• Excellent communication and client relationship management abilities.
• Proven ability to manage complex projects and deliver high-quality results.
• Strategic thinking with a focus on innovation and continuous improvement.

• Desired Certifications:
  • Internal Audit Certifications:
    • Certified Internal Auditor (CIA)
    • Certified Information Systems Auditor (CISA)
    • Certification in Risk Management Assurance (CRMA)
  • Cybersecurity Certifications:
    • Certified Information Systems Security Professional (CISSP)
    • Certified Information Security Manager (CISM)
    • Certified in Risk and Information Systems Control (CRISC)
  • Operational Technology Certifications:
    • Global Industrial Cyber Security Professional (GICSP)
    • Certified SCADA Security Architect (CSSA)
    • ISA/IEC 62443 Cybersecurity Certificate Programs (e.g., ISA/IEC 62443 Cybersecurity Expert)

What we look for

We’re interested in intellectually curious people with a passion for cybersecurity and a desire to grow their skills as part of a diverse and engaged team of OT cybersecurity professionals.

What we offer

At EY, our Total Rewards package supports our commitment to creating a leading people culture - built on high-performance teaming - where everyone can achieve their potential and contribute to building a better working world for our people, our clients and our communities. It's one of the many reasons we repeatedly win awards for being a great place to work.

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a comprehensive medical, prescription drug and dental coverage, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry
• Learning opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

About EY

As a global leader in assurance, tax, transaction and consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime

Diversity and Inclusion at EY

Diversity and inclusiveness are at the heart of who we are and how we work. We’re committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.