Intermediate IT Control Tester - Procurement (CISA)

Swoon; Toronto; Hybrid; CAD 70,000 - 90,000; Full time

Job summary

A financial services company located in Toronto is looking for an Intermediate Control Tester. The ideal candidate must have over 3 years of experience in audit, risk management, or internal controls, along with a relevant certification like CISA. This role involves executing risk-based control testing and requires a strong understanding of compliance frameworks such as SOX and COBIT. The position is hybrid, requiring onsite work for part of the week.

Qualifications

• 3+ years of experience in internal controls, audit, risk management, or compliance.
• Knowledge of SOX, COSO, and COBIT frameworks.
• Ability to work onsite in a hybrid environment.

Responsibilities

• Execute risk-based control monitoring and testing across various procurement operations.
• Blend IT audit expertise with project management to ensure controls are effective and compliant.

Skills

Internal controls

Audit

Risk management

Compliance

Audit analytics

Education

CISA certification or CISSP

Job description

Contract Length: 1-Year Contract (Extension and FTE Conversion Possible)

Location: Toronto

Industry: Financial Services / Procurement Risk & Controls

Overview

We are seeking an Intermediate Control Tester to support Procurement by executing risk-based control monitoring and testing across third-party risk, sourcing, supplier management, procurement operations, and accounts payable. This role blends IT audit expertise with strong project management discipline to ensure controls are effective, compliant, and aligned with regulatory and governance frameworks in a dynamic environment.

Must-Have Qualifications

• 3+ years of experience in internal controls, audit, risk management, or compliance
• CISA certification (or CISSP)
• Hands-on experience with IT automated controls and risk-based testing
• Strong sampling, audit analytics, and documentation skills
• Knowledge of SOX, COSO, and COBIT frameworks
• Ability to work onsite in a hybrid environment (3 days/week)

Nice-to-Have Qualifications

• PMP certification or progress toward PMP
• Experience within banking or regulated environments
• Exposure to third-party risk management and procurement controls
• Experience across cloud and on-premise IT environments