IT Audit Specialist

Infotek Consulting Inc.; Toronto; On-site; CAD 120,000 - 150,000; Full time

Job summary

Infotek Consulting Inc. seeks an experienced Information Security Specialist focused on IT Risk, GRC, and IT Audit to oversee audit remediation quality and regulatory responses. The role also drives an AI-enabled assurance transformation, shaping AI capabilities to assess remediation plans, evidence, and control gaps.

You will lead independent testing, assess evidence sufficiency, and guide stakeholders across the three lines of defense, aligning with data privacy and model risk requirements.

Qualifications

• 10+ years in IT Risk, Governance, Risk & Compliance or technology controls in regulated industries.
• Strong background in IT Audit, Information Security, GRC or tech risk management.
• Excellent written and verbal communication with solid documentation skills.
• Hands-on audit testing, evidence evaluation, remediation validation and root cause analysis.
• Experience with assurance/QA reviews of audit and regulatory findings.
• Understanding of NIST, COBIT or ITIL frameworks.
• Experience with AI/ML initiatives and AI-enabled assurance solutions.

Responsibilities

• Conduct independent, risk-based reviews of audit and regulatory remediation plans.
• Perform sample-based testing using IOR methodologies.
• Assess remediation quality, evidence sufficiency, and closure readiness.
• Provide independent challenge and oversight across remediation activities.
• Advise on IT Risk Governance, Audit & Assurance Standards and GRC frameworks.
• Lead design and implementation of an AI-enabled capability to support QA and reviews.
• Translate QA frameworks and regulatory expectations into AI workflows.

Skills

IT Risk

GRC

IT Audit

Audit testing

Evidence evaluation

QA reviews

Communication

Root cause analysis

AI/ML initiatives

Regulatory remediation

Tools

ServiceNow

RSA Archer

JIRA

Confluence

SharePoint

Job description

We are looking for an experienced Information Security Specialist with a strong background in IT Risk, Governance, Risk & Compliance (GRC), and IT Audit to support independent oversight and quality assurance of audit and regulatory remediation activities.

This role will also lead an exciting AI-enabled assurance transformation initiative, helping develop AI capabilities to assess remediation plans, evaluate supporting evidence, identify control gaps, and strengthen assurance processes.

Key Responsibilities:

• Conduct independent, risk-based reviews of audit and regulatory remediation plans.
• Perform sample-based testing using Inspection, Observation and Reperformance (IOR) methodologies.
• Assess remediation quality, evidence sufficiency, control effectiveness, milestones, and closure readiness.
• Provide independent challenge and oversight across remediation activities, working with stakeholders across the three lines of defense.
• Advise on IT Risk Governance, Audit & Assurance Standards, technology controls, and GRC frameworks.
• Lead the design and implementation of an AI-enabled capability to support remediation QA and challenge reviews.
• Translate QA frameworks, scoring criteria, and regulatory expectations into AI workflows and evaluation logic.
• Ensure responsible AI implementation in alignment with information security, privacy, and model risk requirements.

Must-Have Qualifications:

• 10+ years of experience in IT Risk, Governance, Risk & Compliance, or technology controls within regulated industries.
• Strong background in IT Audit, Information Security, GRC, or technology risk management.
• Excellent written and verbal communication skills, with strong documentation capabilities.
• Hands-on experience with audit testing, evidence evaluation, issue remediation validation, root cause analysis, and control effectiveness assessments.
• Experience conducting assurance, validation, or QA reviews of audit and regulatory findings.
• Understanding of IT risk and control frameworks such as NIST, COBIT, or ITIL.
• Experience with AI/ML initiatives, particularly developing or implementing AI-enabled assurance solutions.

Nice to Have:

• CISA, CRISC, CISSP, CIA, or equivalent professional certification.
• Six Sigma or Lean continuous improvement experience.
• AI Security or AI Risk Management experience.
• Experience with ServiceNow, RSA Archer, JIRA, Confluence, and SharePoint.

Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.