Hybrid Internal Auditor: ISO 27001 & Security Controls

Ross Video; Ottawa; Hybrid; CAD 82,000 - 110,000; Full time

Benefits offered by this job

Flexible hours

Generous paid time off

Wellness allowance

Employee share ownership program

Learning & development support

Job summary

Ross Video in Canada seeks an Internal Audit Analyst to formalize and maintain non-financial audit controls supporting ISO 27001 compliance and data protection obligations. You will design controls, perform testing, and prepare artefacts for internal and external assurance in a fast-moving tech environment.

Responsibilities include maintaining audit evidence repositories, leveraging AI-enabled tools to improve traceability, and partnering with Legal, IT, and Security teams.

Qualifications

• Bachelor's degree in Accounting, Information Systems, Commerce, Finance, or related field.
• Minimum 2 years of internal audit or external/public audit experience.
• Experience with control testing, evidence gathering, and audit execution across security/privacy frameworks (SOC 2, ISO 27001, HIPAA, PCI).
• Exposure to IT risk management or governance functions desirable.

Responsibilities

• Collaborate to design and implement operational audit controls aligned with ISO 27001:2022.
• Perform ongoing audit and control testing across units and systems, using approved AI-enabled tools where appropriate to support evidence review and improvement of control outcomes.
• Maintain the internal controls catalogue and audit evidence repository to support external attestation efforts and regulatory inquiries.
• Lead recurring audit assessments and control reviews; use approved AI-enabled tools to support analysis, summarization, and preparation of clear findings and recommendations for senior stakeholders.
• Support integration of privacy and security controls mapped to in-scope legal and regulatory obligations (e.g., GDPR, PIPEDA, CCPA).
• Track remediation progress and ensure follow-up on control gaps or process deficiencies identified through internal reviews or external audits.
• Develop and maintain policies and procedures in alignment with ISO/IEC 27001:2022 standards.
• Maintain a centralized repository of policies and procedures and monitor compliance with established document governance requirements.
• Maintain and administer the organization's risk register, ensuring risks are accurately documented, assessed, and monitored.
• Facilitate risk identification, assessment, mitigation, and reporting activities across business and technology functions.

Skills

Audit controls design

Control testing

Evidence gathering

Regulatory compliance

Communication to non-technical

Analytical thinking

Education

Bachelor's degree in Accounting/IS/Finance/Commerce

Tools

Microsoft Excel

Microsoft Word

Job description

Ross Video in Canada seeks an Internal Audit Analyst to formalize and maintain non-financial audit controls supporting ISO 27001 compliance and data protection obligations. You will design controls, perform testing, and prepare artefacts for internal and external assurance in a fast-moving tech environment.

Responsibilities include maintaining audit evidence repositories, leveraging AI-enabled tools to improve traceability, and partnering with Legal, IT, and Security teams.