IT Auditor

Aston Carter; Toronto; Hybrid; CAD 90,000 - 110,000; Full time

Job summary

Aston Carter is seeking an IT Audit and Risk Advisory Specialist in Toronto to provide assurance over IT controls, support financial statement audits, and advise on IT risk management across ERP, core banking, and cloud environments.

You will conduct ITGC testing, assist SOX/ICFR programs, draft findings, and collaborate with clients and external auditors. Part-time/ flexible hours available, with a focus on quality, methodological rigor, and professional development.

Qualifications

• Minimum 3 years of IT auditing experience, including IT audit engagements.
• Experience with ITGC testing, access management, change control and operations.
• Hands-on with SOC 1 and SOC 2 audit work or reporting.
• Strong understanding of IT controls, risk management and internal control frameworks.
• Excellent ability to interface with clients and collaborate with external auditors.

Responsibilities

• Plan and execute IT audit and risk advisory engagements in support of financial audits.
• Provide assurance over IT and business process controls to support audit objectives.
• Perform external IT audits and deliver third‑party reporting for clients.
• Test ITGCs across ERP, core banking, and cloud environments.
• Evaluate application controls for adequacy and effectiveness.
• Support SOX/ICFR programs with testing, documentation and remediation.
• Identify control gaps, assess risk, and propose practical improvements.
• Draft concise audit findings and deliverables for technical and non‑technical audiences.
• Collaborate with external auditors, internal teams, and client stakeholders.
• Interface with clients to discuss scope, results, and remediation plans.
• Maintain organized audit documentation and evidence.
• Coach junior team members and uphold audit methodology.
• Contribute to proposals and client relationship activities.

Skills

IT auditing

ITGC testing

SOX / ICFR

SOC 1 / SOC 2

risk assessment

client communication

documentation

quality control

Education

IT Specialist Accreditation

CISA certification

Tools

ERP systems

Core banking platforms

Cloud environments

Job description

IT Audit and Risk Advisory Specialist

This role focuses on providing assurance over IT and business process controls, performing external audits, delivering third‑party reporting, and advising clients on IT risk and control matters. You will support financial statement audits and standalone reviews by assessing the design and operating effectiveness of IT general controls and application controls across key systems such as ERP, core banking platforms, and cloud environments.

Responsibilities

• Plan and execute IT audit and IT risk advisory engagements in support of financial statement audits and standalone reviews.
• Provide assurance over IT and business process controls to support overall audit objectives.
• Perform external IT‑related audits and deliver high‑quality third‑party reporting for clients.
• Assess the design and operating effectiveness of IT General Controls (ITGCs), including access management, change management, and computer operations.
• Perform detailed testing across key systems such as ERP platforms, core banking systems, and cloud‑based solutions.
• Evaluate automated and configurable application controls to determine adequacy and effectiveness.
• Support SOX and ICFR compliance programs, including testing, documentation, and remediation activities.
• Identify control gaps and weaknesses, assess their risk impact, and recommend practical, risk‑based improvements.
• Draft clear, concise audit findings and client deliverables, including reports, working papers, and presentations.
• Collaborate effectively with external auditors, internal audit teams, and client stakeholders to coordinate testing and share findings.
• Interface directly with clients to discuss audit scope, testing results, remediation plans, and ongoing risk management considerations.
• Perform document control testing and maintain accurate, organized audit documentation and evidence.
• Apply risk management and internal control concepts to evaluate IT processes and systems.
• Coach and review work performed by junior team members to ensure quality and consistency.
• Contribute to proposal development and client relationship management activities as needed.
• Support quality control efforts by adhering to established audit methodologies, standards, and documentation requirements.

Essential Skills

• Minimum 3 years of experience in IT auditing, including planning and executing IT audit engagements.
• Minimum 3 years of experience in document control testing within an audit or compliance environment.
• Hands‑on experience with IT General Controls (ITGC) testing, including access management, change management, and computer operations.
• Practical experience with SOC 1 and SOC 2 related audit work or reporting.
• Strong understanding of IT controls, internal control frameworks, and risk management principles.
• Ability to perform control testing across key systems such as ERP platforms, core banking systems, and cloud environments.
• Experience supporting SOX compliance and internal control over financial reporting (ICFR) programs.
• Ability to interface directly with clients in a professional and confident manner.
• Strong skills in auditing, control testing, document control, and quality control.
• Capacity to draft clear, concise audit findings and deliverables for both technical and non‑technical audiences.
• Effective collaboration skills to work with external auditors, internal audit teams, and client stakeholders.
• Ability to coach and review work of junior team members, ensuring adherence to audit methodology and quality standards.

Additional Skills & Qualifications

• IT Specialist Accreditation is required; training support is available to obtain this accreditation.
• Professional certification such as CISA is highly relevant and beneficial for this role.
• Experience with SOC 1 and SOC 2 engagements and reporting is an advantage.
• Experience in risk management and internal control assessment is valuable.
• Strong client interaction skills, including the ability to communicate complex IT control issues in an accessible way.
• Openness to candidates with 1–3 years of experience, including more junior professionals who are eager to learn.
• Ability to work part‑time, with options for approximately 20 hours per week.
• Detail‑oriented mindset with strong organizational skills for managing documentation and multiple engagements.
• Ability to work both independently and collaboratively within a structured audit framework.

Work Environment

You will work within a collaborative team of IT specialists focused on audit, risk advisory, and compliance activities. The environment emphasizes teamwork, knowledge sharing, and professional development, including training support for IT Specialist Accreditation. Work hours can be flexible, with opportunities for part‑time schedules around 20 hours per week. You will use modern audit tools and work with a variety of technologies, including ERP systems, core banking platforms, and cloud‑based solutions, in a professional setting that supports careful documentation, structured methodologies, and high‑quality client service.

Job Type & Location

This is a Contract position based out of Toronto, ON.

Pay And Benefits

The pay range for this position is $65.00 - $80.00/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job‑related factors.

Workplace Type

This is a hybrid position in Toronto,ON.

Equal Opportunity & Diversity

Aston Carter est un employeur souscrivant au principe de l’égalité des chances et accepte toutes les candidatures sans tenir compte de la race, du sexe, de l’âge, de la couleur, de la religion, des origines nationales, du statut d’ancien combattant, d’un handicap, de l’orientation sexuelle, de l’identité sexuelle, des renseignements génétiques ou de toute autre caractéristique protégée par la loi.

Si vous souhaitez faire une demande d’accommodement raisonnable, tel que la modification ou l’ajustement du processus de demande d’emploi ou d’entrevue à cause d’un handicap, veuillez envoyer un courriel à [e-mail] pour connaître d’autres options d’accommodement.

Ordonnance sur l’égalité des chances de San Francisco : Conformément à l’Ordonnance sur l’égalité des chances de San Francisco, pour tous les postes situés dans la ville et le comté de San Francisco, nous examinerons les candidatures des personnes qualifiées ayant un casier judiciaire ou des antécédents criminels.

Utilisation de l’intelligence artificielle (IA) : Nous pouvons utiliser l’intelligence artificielle (IA) pour soutenir certaines étapes de notre processus d’embauche, notamment la recherche, la présélection et l’évaluation des candidatures. L’IA aide à analyser les candidatures et les qualifications, mais les décisions finales sont prises par notre équipe de recrutement. En soumettant votre candidature, vous reconnaissez et acceptez que celle‑ci puisse être examinée à l’aide d’outils d’IA.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email [e-mail] for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.