IT Systems Auditors

ITnet; Ottawa; On-site; CAD 70,000 - 110,000; Full time

Job summary

ITnet in Ottawa, Ontario seeks an IT Audit professional to lead and participate in IT audit engagements, assess ITGCs and information security controls, and develop testing programs.

You will mentor junior staff, interact with stakeholders, and contribute to framework alignment with COBIT, NIST, ISO 27001. Strong English communication required. Certifications such as CIA/CISA/CISSP are preferred.

Qualifications

• Experience conducting IT audits, ITGC assessments, controls testing, risk assessments, or related assurance activities.
• Knowledge of IT General Controls, application controls, information security controls, change management, and IT operations controls.
• Strong analytical, problem-solving, and communication skills.
• Ability to communicate effectively in English, both verbally and in writing.

Responsibilities

• Participating in the planning, execution, and reporting of IT audit engagements.
• Developing and executing audit programs, testing strategies, and procedures.
• Conducting risk-based assessments of IT environments, systems, processes, and controls.
• Testing ITGCs including user access, change management, IT operations, and application controls.
• Interviews, walkthroughs, and evidence reviews with stakeholders.
• Documenting testing results, observations, and recommendations.
• Leading or mentoring junior resources and coordinating tasks.

Skills

IT audits

ITGC assessments

Controls testing

Risk assessments

English communication

Problem solving

Analytical thinking

Education

CIA

CISA

CISSP

CPA / CA / CMA / CGA

Job description

Key Responsibilities

Depending on level of experience and project assignment, responsibilities may include:

• Participating in the planning, execution, and reporting of IT audit and assessment engagements.
• Developing and executing audit programs, testing strategies, methodologies, and detailed testing procedures.
• Conducting risk-based assessments of information technology environments, systems, processes, and controls.
• Performing and documenting testing of IT General Controls (ITGCs), including:
• User access management and security controls;
• Change management and system development controls;
• IT operations and related controls;
• Application controls, including input, processing, output, and segregation of duties.
• Conducting interviews, walkthroughs, workshops, and evidence reviews with business and technical stakeholders.
• Evaluating the design and operating effectiveness of controls and documenting testing results and conclusions.
• Identifying control deficiencies, assessing associated risks, and developing recommendations for improvement.
• Preparing working papers, audit documentation, observations, findings, conclusions, and recommendations.
• Drafting, reviewing, and revising assessment reports, briefing materials, and other project deliverables.
• Presenting observations, findings, and recommendations to project leadership and client stakeholders.
• Supporting or leading audit team activities, including task coordination, quality review, mentoring, and supervision of junior resources, as applicable.
• Contributing to the continuous improvement of audit methodologies, assessment frameworks, and quality assurance practices.

Junior resources will work under the direction of senior team members and may be responsible for:

• Assisting with audit planning, fieldwork, testing, and documentation activities.
• Conducting research, evidence gathering, and preliminary analysis.
• Preparing working papers and supporting documentation.
• Assisting in the development of audit observations and draft reports.
• Participating in stakeholder meetings, interviews, and walkthroughs.

Intermediate resources are expected to work independently on assigned work streams and may be responsible for:

• Planning and executing audit testing activities.
• Conducting control assessments and documenting findings.
• Facilitating interviews and walkthroughs with stakeholders.
• Developing observations, risk assessments, and recommendations.
• Drafting sections of reports and presenting findings to project leadership.
• Providing guidance and support to junior resources.

Senior resources are expected to lead complex audit engagements and may be responsible for:

• Developing engagement strategies, work plans, methodologies, and testing approaches.
• Leading audit teams and overseeing the quality and completeness of deliverables.
• Supervising and mentoring audit staff.
• Reviewing working papers, testing results, and reports.
• Presenting findings and recommendations to senior management and executive stakeholders.
• Providing subject matter expertise in IT audit, ITGCs, information security, and risk management.

Candidates should possess a combination of the following qualifications, with specific requirements varying by resource level:

Mandatory

• Experience conducting IT audits, ITGC assessments, controls testing, risk assessments, or related assurance activities.
• Experience with audit planning, fieldwork, documentation, testing, analysis, and reporting.
• Knowledge of IT General Controls, application controls, information security controls, change management processes, and IT operational controls.
• Strong analytical, problem-solving, and communication skills.
• Ability to communicate effectively in English, both verbally and in writing.

Professional Certifications (one or more)

• CPA, CA, CMA, or CGA
• CIA (Certified Internal Auditor)
• CGAP (Certified Government Auditing Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CISSP (Certified Information Systems Security Professional)

Preferred Experience

• Public sector audit or assurance engagements.
• Internal audit, compliance, risk management, or controls assessment experience.
• Experience with recognized frameworks and standards such as COBIT, NIST, ISO 27001, ITIL, or COSO.
• Experience leading teams, reviewing deliverables, and engaging with senior stakeholders.