Manager IT Advisory Risk Assurance

OXARO; Ottawa; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading company in the public sector is seeking a Manager for IT Advisory Risk & Assurance. This role involves managing client engagements, conducting audits, and mentoring junior staff. The ideal candidate will have a strong IT background, relevant qualifications, and experience in risk management.

Qualifications

• 3 to 7 years of experience in IT risk management, auditing, or related fields.
• Designations such as CPA, CISSP, CISA, CISM, CRISC, or ISO27001 Lead Auditor.

Responsibilities

• Lead and execute client assessments in IT internal audit and IT Risk.
• Analyze internal control structures and advise clients on security posture.

Skills

Communication

Analytical

Organizational

Education

Bachelor's degree in accounting, business, finance, economics, computer science, engineering

Tools

NIST

ISO 27001

ITIL

COBIT

SOC 2

Job description

Please note: This is a permanent, full-time hybrid opportunity.

We are a member firm of the greater Raymond Chabot Grant Thornton & Grant Thornton Canada networks. OXARO Inc. specializes in supporting public sector clients across Canada with advisory, placement services, and digital solutions. Recently, we have focused on expanding our value-added services and identified a market gap for delivering innovative digital solutions. Our Digital practice aims to bridge this gap by providing modern technology and services to our clients in the public sector.

What we're looking for:

OXARO Inc. is seeking a Manager, IT Advisory Risk & Assurance, to manage and deliver client engagements according to our standards. Responsibilities include conducting fieldwork (remote or on-site), such as walkthroughs, interviews, technical testing, and documenting findings. The successful candidate will be a team player, mentor junior staff, and contribute to enhancing our IT Advisory, Risk, and Assurance service line through market presence and strategic collaboration with senior management.

A day in the life:

• Lead and execute client assessments in areas such as:
• IT internal audit
• IT Risk
• Data Governance and Management
• Artificial Intelligence Readiness
• Various IT security and operational audits

Additional responsibilities include analyzing internal control structures, performance, and efficiency; maintaining knowledge of risk and governance frameworks, industry trends; advising clients on security posture and controls; supporting remediation activities; and providing feedback to clients and internal teams.

Role Requirements:

• Bachelor's degree in accounting, business, finance, economics, computer science, engineering, or a related field.
• Designations such as CPA, CISSP, CISA, CISM, CRISC, or ISO27001 Lead Auditor (completed or in progress).
• 3 to 7 years of experience in IT risk management, auditing, or related fields.
• Experience with security controls audits (e.g., SOC 2, ISO 27001, NIST) is preferred.
• Knowledge of ITGCs, ITACs, cybersecurity, project risk, security governance, Cloud, data governance, application security, and business continuity.
• Familiarity with frameworks/standards like NIST CSF, ISO 27001, ITIL, COBIT, COSO, SOX, SOC1/2, PCI, GDPR.
• Excellent communication and interpersonal skills.
• Strong IT background preferred.
• Ability to work independently in a fast-paced environment.
• Attention to detail, organizational, and analytical skills.
• Willingness to travel to client sites.
• Valid secret clearance or ability to obtain one.

Only candidates under consideration will be contacted. OXARO Inc. is an equal opportunity employer and supports accommodations for candidates with disabilities during the selection process.