Senior IT Audit Specialist

Marberg Staffing; Toronto; On-site; CAD 69,000 - 94,000; Full time

Job summary

Marberg Staffing seeks a Senior IT Audit Specialist for a provincial government client in downtown Toronto. The role focuses on evaluating technology risks, governance, and controls, including SOC 2 experience, with travel within Ontario as needed.

The ideal candidate has 5+ years in IT audit, strong knowledge of information security controls, and the ability to lead multi-engagement projects while communicating findings to senior leaders.

Qualifications

• University degree in IT/CS/Accounting/Business/Cybersecurity or related field.
• CISA/CISSP/CRISC/CIA/CPA or equivalent assets.
• At least 5+ years in IT audit, tech risk, cybersecurity, compliance, or internal audit.

Responsibilities

• Lead and execute IT audit, advisory, and risk assessment engagements with stakeholders across technology and business functions.
• Lead and perform risk-based IT audits, reviews, and advisory engagements.
• Evaluate IT governance, risk management, cybersecurity, privacy, and internal control frameworks.
• Assess technology environments including applications, infrastructure, cloud, and information security controls.
• Identify risks, gaps, and process improvement opportunities with practical recommendations.
• Prepare audit reports and communicate findings to management and executives.
• Support reviews of major technology projects, system implementations, and transformation initiatives.
• Facilitate risk workshops and governance discussions.
• Monitor emerging tech and cybersecurity risks and their impact.
• Contribute to audit methodologies and best practices.
• Manage multiple engagements while meeting timelines.

Skills

Audit software (IDEA/ACL/Sharpe)

MS Office (Excel/Word)

English communication

Education

University degree in IT/CS/Accounting/Business/Cybersecurity

Tools

IDEA

ACL

Sharpe Decisions

Job description

Senior IT Audit Specialist for a provincial government client, downtown Toronto (3 positions).

Position plays key role in evaluating technology risks, strengthening governance and controls, and supporting critical business and technology initiatives. Ideal candidate is auditor with strong IT Audit background and previous experience in SOC 2 audits. Knowledge of accounting, business processes, and/or project management an asset.

Job Type: Temporary.

Existing Vacancy: Yes (3 positions).

Initial Term: From January 4, 2027 to March 31 2027.

Compensation: From $49.81 to $68.15 per hour, according to experience.

Regular Work Hours: 7.25 hours per day not including 1 hour unpaid lunch break, to be worked during regular business hours, Monday to Friday (36.25 work hours per week). Additional paid hours occasionally required according to client business need.

Work Location: 100% onsite at client's downtown Toronto office.

Travel Requirements: Occasional travel to client sites within Ontario, including overnight travel, may be required.

Position Reports To: Senior IT Audit Manager.

Responsibilities:

• Lead and execute IT audit, advisory, and risk assessment engagements while partnering with stakeholders across technology and business functions.
• Lead and perform risk-based IT audits, reviews, and advisory engagements.
• Evaluate IT governance, risk management, cybersecurity, privacy, and internal control frameworks.
• Assess technology environments, including applications, infrastructure, cloud platforms, and information security controls.
• Identify risks, control gaps, and opportunities for process improvement, and develop practical recommendations.
• Prepare audit reports and communicate findings to management and executive stakeholders.
• Support reviews of major technology projects, system implementations, and transformation initiatives.
• Facilitate stakeholder meetings, risk workshops, and discussions on governance and compliance matters.
• Monitor emerging technology and cybersecurity risks and assess their potential impact on the organization.
• Contribute to continuous improvement initiatives and the development of audit methodologies and best practices.
• Manage multiple engagements while maintaining quality standards and meeting project timelines.

Qualifications:

Education: University degree in Information Technology, Computer Science, Accounting, Business, Cybersecurity, or a related field.

Professional Credentials: One or more of the following certifications would be considered an asset: CISA (Certified Information Systems Auditor); CISSP (Certified Information Systems Security Professional); CRISC (Certified in Risk and Information Systems Control); CIA (Certified Internal Auditor); CPA or equivalent professional designation

Preferred Work Experience: At least 5+ years' of progressive experience in IT audit, technology risk, cybersecurity, compliance, or internal audit.

Preferred Sector Experience: Public sector experience preferred.

Technical and Language Skills Requirements:

• Proficiency with specialized audit software, e.g. IDEA, Audit Command Language (ACL), Sharpe Decisions, to facilitate evaluation of large volumes of data, and risks associated with IT systems.
• Proficiency with MSOffice Suite, especially Excel and Word.
• Strong English communication skills, including advanced level business writing skills and verbal presentation skills suitable for a diverse range of audiences including senior leadership.

Task -Based Qualifications and Additional Attributes:

• Previous experience in SOC 2 audits.
• Understanding of generally accepted auditing standards, IT governance and control frameworks and specialized auditing techniques to plan, lead and conduct IT and business audit engagements, consulting, advisory and special investigation assignments.
• Understanding of Information Security principles and methodologies, including protection of confidentiality, integrity and availability of information assets; information privacy and security; and protection of information and infrastructure assets against risk of loss, misuse, disclosure, or damage.
• Understanding of Information Management principles and methodologies to facilitate use of good information, including records management, e-discovery techniques, and compliance with relevant legislations (e.g. FIPPA, PHIPA, PIPEDA, Archives and Recordkeeping Act).
• Familiarity with IT systems under development, emerging technologies, security, e-commerce, telecommunications and networks, computer operations, and critical business and IT applications and systems.
• Understanding of project management standards, best practices and frameworks to lead and conduct audit of IT projects and business transformation initiatives.

Additional Requirements:

• Must be legally entitled to work in Canada, providing satisfactory documentation upon request.
• Ability to work both remotely and onsite, abiding by organization health and safety policies.
• Ability to travel within Ontario as required.
• Ability to declare personal Non-Conflict of Interest in execution of assignment responsibilities.
• Ability to complete a satisfactory Provincial Government security check prior to assignment start.
• Provision of certification of AODA and OHSA online training course completion prior to assignment start.
• Additional Satisfactory Background Checks, Technical and Interpersonal Skills Evaluations, and Employment References as required.