Senior IT Auditor

isgSearch; Markham; On-site; CAD 90,000 - 115,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Retirement and incentive programs

Health Care Spending Account

Training and professional development

Job summary

isgSearch in Markham, Ontario seeks a Senior IT Auditor to join a global organization. You will work with IT, Information Security, Operations and Internal Audit to assess IT controls, cybersecurity practices, risk management and compliance across a global environment.

The role executes IT General Controls (ITGC), SOX and operational audits, identifies risk areas, evaluates control effectiveness and provides actionable recommendations to strengthen security and the control environment.

Qualifications

• 3-5 years IT audit experience with strong information security and IT controls.
• Hands-on ITGC, SOX testing and operational IT audits experience.
• Knowledge of information security risk management frameworks and compliance.

Responsibilities

• Execute IT audit engagements including ITGC and SOX testing.
• Assess IT systems, infrastructure, applications, networks and data centers.
• Develop risk-based audit procedures and work plans.
• Prepare and present audit reports to management.

Skills

IT audit

Information security

IT controls

SOX testing

Risk management

Audit communication

Stakeholder management

Analytical skills

Problem solving

Travel readiness

Education

Bachelor's degree in Information Systems/CS/IT

CISA or CISSP certification (asset)

Job description

Senior IT Auditor

Location: Markham, ON

Salary: $90,000 - $115,000 CAD

Employment Type: Full Time

About the Opportunity

Our client is seeking a Senior IT Auditor to join their growing global organization in Markham. This role will work closely with IT, Information Security, Operations and Internal Audit teams to assess and strengthen IT controls, cybersecurity practices, risk management and compliance across a global environment.

The successful candidate will be responsible for executing IT General Controls (ITGC), SOX and operational audits, identifying areas of risk, evaluating control effectiveness and providing practical recommendations to improve the organization's overall security and control environment.

Key Skills & Experience

• 3-5 years of progressive IT audit experience, with strong experience in information security and IT controls.
• Hands-on experience with IT General Controls (ITGC), SOX testing and operational IT audits.
• Strong understanding of information security risk management frameworks and compliance practices.
• Experience assessing technology infrastructure, applications, networks, data centers and cybersecurity environments.
• Experience with risk assessments, control testing, audit planning and audit execution.
• Strong knowledge of IT security controls, cybersecurity risks and regulatory compliance.
• Experience responding to, analyzing and communicating information security incidents.
• Strong analytical and problem-solving skills, including the ability to identify trends, root causes and control weaknesses.
• Excellent written and verbal communication skills, including formal audit report writing and presentations.
• Strong stakeholder management skills and the ability to work effectively with both technical and non-technical stakeholders.
• Bachelor's degree in Information Systems, Computer Science, Information Technology or a related discipline.
• CISA or CISSP certification is an asset.
• Strong attention to detail, organizational skills and a proactive approach to problem solving.
• Ability to manage multiple priorities in a fast-paced, dynamic environment.
• Willingness to travel internationally as required.

Key Responsibilities

• IT Audit & Risk Management
• Assist the Senior Audit Manager in executing an integrated, value-added IT audit program focused on IT General Controls.
• Execute IT audit engagements, including operational audits and SOX testing, with exposure to global business units and international operations.
• Perform risk assessments to identify technology, cybersecurity, operational and compliance risks.
• Assess the adequacy and effectiveness of IT and information security controls across systems, infrastructure and business processes.
• Develop risk-based audit procedures and work plans based on identified business and technology risks.
• Conduct audits of IT systems, infrastructure, applications, networks and data centers.
• Evaluate compliance with applicable laws, regulations, internal policies and industry standards.
• IT Security & Cybersecurity
• Assess information security controls and identify potential vulnerabilities and control weaknesses.
• Support security incident investigation, risk analysis and compliance activities.
• Conduct vulnerability and penetration testing where required.
• Review security measures protecting organizational data, systems and networks.
• Support the identification, analysis and remediation of cybersecurity risks.
• Troubleshoot and assess security and network-related issues, including potential security breaches.
• Audit Execution
• Work closely with IT teams, local management and internal or co-sourced audit resources to understand business operations and technology environments.
• Plan and execute detailed audit engagements from scoping through completion.
• Document audit procedures, testing results, findings and conclusions in accordance with audit standards.
• Ensure audit workpapers provide appropriate support for audit conclusions.
• Review controls over existing systems to ensure compliance with regulatory requirements and internal policies.
• Develop project plans, audit programs and control evaluation frameworks.
• Reporting & Remediation
• Prepare and present audit reports to local and senior management, clearly communicating risks, control deficiencies and recommended remediation.
• Work with management to develop practical action plans and process improvement opportunities.
• Maintain and manage the IT audit findings log.
• Monitor corrective actions and follow up on outstanding remediation activities.
• Escalate significant discrepancies or unresolved risks to appropriate corporate management.
• Present audit conclusions and recommendations to IT and Audit leadership.
• Provide clear, concise and actionable recommendations to strengthen the overall control environment.
• Stakeholder Management
• Build strong working relationships with IT, Information Security, Operations, Internal Audit and business leadership.
• Partner with management to develop cost-effective and sustainable IT internal controls.
• Communicate complex technical and security matters clearly to both technical and non-technical stakeholders.
• Work independently while collaborating effectively across global teams and business units.

What the Client Offers

• Competitive salary and comprehensive benefits package.
• Health, dental, vision and travel insurance.
• Retirement and incentive programs.
• Health Care Spending Account.
• Opportunities for training, professional development and education.
• Exposure to global technology, cybersecurity and audit initiatives.
• Opportunity to work on projects with international scope and impact.
• A collaborative environment that encourages ownership, initiative and innovation.
• Opportunities for career growth and advancement within a growing global organization.

isgSearch does not use artificial intelligence throughout the hiring process.