Senior Cyber Compliance & Audit Analyst

Thomson Reuters; Toronto; Hybrid; CAD 80,000 - 100,000; Full time

Job summary

A leading company is seeking a Senior Cyber Compliance & Audit Analyst in Toronto. This role involves assessing controls, executing testing plans, and overseeing audits. The ideal candidate will have a Bachelor's degree and relevant experience in audit or governance roles, along with certifications like CISA or CISSP. Join a hybrid work environment that promotes work-life balance and continuous learning opportunities.

Benefits

Flexible scheduling

Work-life balance policies

Competitive benefits

Opportunities for career growth

Qualifications

• 4+ years of relevant experience in SoX, ITGC, SOC, PCI.
• Control testing or compliance experience in financial services.

Responsibilities

• Assess and test the design and operational effectiveness of controls.
• Compile and present audit reports to management.
• Coordinate with teams to report and track remediation plans.

Skills

Communication

Ethics

Knowledge of web and cloud security vulnerabilities

Education

Bachelor's degree in IT, Accounting, Finance

Tools

ServiceNow

RSA Archer

Job description

Join to apply for the Senior Cyber Compliance & Audit Analyst role at Thomson Reuters.

Looking forward to advancing your career in IT Audit? We are growing and hiring—come join us.

Location: Toronto, CAN (hybrid)

About the Role:

• Assess, challenge, and test the design and operational effectiveness of controls using TR’s control framework, collaborating with control owners and stakeholders to improve testing processes.
• Execute testing plans, communicate requirements, review evidence, identify deficiencies, and determine next steps.
• Oversee and liaise for external and internal audits.
• Identify non-compliant procedures and practices according to industry frameworks.
• Recommend and support stakeholders in addressing non-compliance.
• Compile and present audit reports to management.
• Propose efficiencies and automation to optimize workflows.
• Coordinate with teams like ERM, Finance, and third-party support to report and track remediation plans.
• Ensure awareness of security risks, best practices, and policy compliance.
• Work independently, meet deadlines, and handle team requirements.
• Maintain a continuous learning mindset and openness to change.

About You:

• Bachelor's degree in IT, Accounting, Finance, or equivalent experience.
• 4+ years of relevant experience in SoX, ITGC, SOC, PCI, within audit or governance roles.
• Control testing or compliance experience in financial services.
• Certifications such as CISA, CISSP, CCAK, CISM, CRISC, or ISO are essential.
• Strong ethics and understanding of business and IS ethics.
• Knowledge of web and cloud security vulnerabilities (SANS, OWASP Top10, CSA).
• Experience testing cloud controls is a plus.
• Excellent communication skills in English; additional languages are an asset.
• Familiarity with GRC platforms like ServiceNow, RSA Archer, etc.

What’s in it For You?

• Hybrid work environment with flexible scheduling.
• Work-life balance policies, including work-from-anywhere options.
• Opportunities for career growth and continuous learning.
• Competitive benefits, including mental health days, retirement plans, and more.
• Inclusive culture emphasizing belonging, flexibility, and social impact.
• Opportunity to contribute to justice, transparency, and societal impact.

About Us

Thomson Reuters provides trusted content and technology to legal, tax, accounting, compliance, government, and media professionals worldwide. With over 26,000 employees across 70+ countries, we foster a culture of integrity, fairness, and transparency. We are committed to diversity, inclusion, and equal opportunity employment.