Senior Internal IT Auditor

Air Transat; Quebec; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Air Transat in Quebec is seeking an experienced IT Audit professional to lead control testing and develop risk-based internal IT coverage. You will interact with the external auditor, document the IT control environment, and drive remediation of deficiencies.

The role requires planning and executing audits across cybersecurity, access, changes, operations, and critical applications, with collaboration across IT, finance, and operations teams.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent certification is an asset.
• Practical knowledge of ITGC, application controls, report controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers.
• Knowledge of data analytics tools (e.g. Power BI), knowledge of SAP is an asset.
• Excellent communication, popularization, collaboration, and multi-deliverable management skills with IT, finance, operations stakeholders, and external auditors.
• Oral and written mastery of French and English.*

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls, and report controls.
• Act as a key point of contact with the external auditor for work involving IT controls, including coordinating requests, evidence, and follow-ups.
• Structure and maintain the documentation of the IT control environment, including the inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers and determine required follow-ups for complementary controls, exceptions, or identified limitations.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and ensure follow‑up on remediation plans with relevant stakeholders.
• Plan and carry out risk-based operational IT internal audits, particularly in the areas of cybersecurity, access, changes, operations, IT suppliers, technology projects, and critical applications.
• Act as a business partner to the DSI to strengthen the internal IT control environment, guide the remediation of deficiencies, and sustainably integrate good control practices.
• Prepare concise communications for management on risks, findings, recommendations, action plans, and the progress of IT work.
• Support the internal audit team in using analytics to increase the efficiency, coverage, and value of audit work, including creating analysis routines using Power BI and other relevant tools.

Skills

Excellent communication

Bilingual English/French

Analytical thinking

Education

Bachelor's degree in information systems / computer science / accounting

CISA preferred; CPA/CIA/CRMA/CRISC/CISSP/CISM or equivalent asset

Tools

Power BI

SAP

Job description

Company Description

Be part of the trip!

Our mission is to be our customers' and our team's favorite airline.

Open-mindedness, care for others, intelligence at work, and above all, a good dose of fun allow us to accomplish great things every day. Our commitment has earned us the title of world's best leisure airline on several occasions, and this is just the beginning.

Want to join us? You will have the opportunity to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You will also have the opportunity to work in modern and inspiring work environments.

Job Description

Reporting to the Senior Manager, Internal Audit and Enterprise Risk Management, the incumbent acts as an expert in IT audit and internal controls related to information technology. They contribute to the evaluation of the internal control system regarding financial information under Regulation 52-109, while developing a risk-based operational IT internal audit coverage.

Their role includes planning and executing control testing, organizing the documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and monitoring control deficiencies.

The position also includes managing an IT audit program, including identifying and carrying out internal IT audit mandates.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls, and report controls.
• Act as a key point of contact with the external auditor for work involving IT controls, including coordinating requests, evidence, and follow-ups.
• Structure and maintain the documentation of the IT control environment, including the inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers and determine required follow-ups for complementary controls, exceptions, or identified limitations.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and ensure follow‑up on remediation plans with relevant stakeholders.
• Plan and carry out risk-based operational IT internal audits, particularly in the areas of cybersecurity, access, changes, operations, IT suppliers, technology projects, and critical applications.
• Act as a business partner to the DSI to strengthen the internal IT control environment, guide the remediation of deficiencies, and sustainably integrate good control practices.
• Prepare concise communications for management on risks, findings, recommendations, action plans, and the progress of IT work.
• Support the internal audit team in using analytics to increase the efficiency, coverage, and value of audit work, including creating analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent certification is an asset.
• Practical knowledge of ITGC, application controls, report controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers.
• Knowledge of data analytics tools (e.g. Power BI), knowledge of SAP is an asset.
• Excellent communication, popularization, collaboration, and multi-deliverable management skills with IT, finance, operations stakeholders, and external auditors.
• Oral and written mastery of French and English *

*Good command of French is required for positions in Quebec. The incumbent will be required to communicate frequently in English, orally and in writing, with colleagues, clients, or other stakeholders, both in Quebec and internationally.

Additional Information

Please note that the internal job title may differ from the posted title.

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

#LI-AE1

Employment Equity

Transat is committed to fostering an inclusive and respectful environment where equity prevails. We strive to build a workforce that reflects the diversity of our customers and the communities in which we travel. We therefore encourage women, visible minorities, ethnic minorities, Indigenous peoples, and persons with disabilities to apply. Transat will accommodate persons with disabilities throughout the selection and hiring process. If you need accommodation measures, please contact us so we can properly meet your needs together.