Senior IT Internal Auditor

Transat AT; Montreal; On-site; CAD 120,000 - 160,000; Full time

Job summary

Transat AT seeks a Senior IT Auditor who will serve as a subject matter expert in IT audit and internal controls for ICFR. The role involves planning and executing IT control testing, coordinating with external auditors, and driving remediation across cybersecurity, access management, and IT operations.

The incumbent will collaborate with IT, Finance, and Operations, leveraging data analytics (Power BI) to improve audit coverage and value, while maintaining strong stakeholder relationships and

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Auditing, Risk Management, or related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGCs, application controls, cybersecurity, or IT risk management.
• CISA certification strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent asset.
• Knowledge of IT general controls (ITGCs), application controls, report controls, and audit testing methodologies.
• Ability to review SOC 1, SOC 2, ISAE 3402, and other assurance reports issued by critical service providers.
• Knowledge of data analytics tools (Power BI); SAP is considered an asset.
• Excellent communication, stakeholder management, collaboration, and project management skills with IT, Finance, Operations, and external audit stakeholders.
• Fluency in French and English; French required for positions in Quebec.

Responsibilities

• Plan, execute, and document IT audit activities for 52-109/ICFR, including ITGCs, application and report controls.
• Serve as primary contact for external auditor on IT control matters, coordinating requests, evidence collection, and follow-up.
• Structure and maintain documentation of the IT control environment, including inventories, systems, applications, interfaces, critical reports, and control owners.
• Review SOC 1, SOC 2, ISAE 3402, and other reports and determine follow-up actions.
• Identify, assess, document IT control deficiencies, provide recommendations, and monitor remediation with stakeholders.
• Plan and perform risk-based IT operational internal audits in areas such as cybersecurity, access management, change management, IT operations, third-party IT service providers, technology projects, and critical applications.
• Act as a business partner to the IT function to strengthen the IT internal control environment, support remediation, and promote best practices.
• Prepare concise management communications on risks, audit findings, recommendations, action plans, and progress of IT initiatives.
• Support the Internal Audit team in leveraging data analytics to enhance efficiency, coverage, and value, including Power BI routines.

Skills

IT audit

SOC reports

Power BI

SAP

ITGCs

Cybersecurity

IT risk management

Education

Bachelor's degree in Information Systems

Tools

Power BI

SAP

Job description

Company Description

Be part of the journey!

Our mission is to be the preferred airline of our customers and our team.

Open-mindedness, concern for others, intelligence at work and, above all, a healthy dose of fun enable us to achieve great things every day. Our dedication has earned us the title of the world's best leisure airline multiple times, and we're just getting started.

Want to join us? You will have the chance to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You will also have the opportunity to work in a modern, inspiring environment.

Job Description

Under the leadership of the Senior Director, Internal Audit and Enterprise Risk Management, the incumbent serves as a subject matter expert in IT audit and internal controls related to information technology. The role contributes to the assessment of the internal control over financial reporting (ICFR) framework in accordance with Regulation 52-109, while developing a risk-based IT operational internal audit coverage.

Key responsibilities include planning and executing control testing, maintaining documentation of the IT control environment, coordinating activities with the external auditor, and identifying, assessing, and monitoring control deficiencies.

The position also involves managing an IT audit program, including the identification, planning, and execution of IT internal audit engagements.

• Plan, execute, and document IT audit activities related to the 52-109 / ICFR program, including IT general controls (ITGCs), application controls, and report controls.
• Serve as the primary point of contact for the external auditor on IT control matters, including coordinating requests, evidence collection, and follow-up activities.
• Structure and maintain documentation of the IT control environment, including control inventories, systems, applications, interfaces, critical reports, and control owners.
• Review SOC 1, SOC 2, ISAE 3402, and other assurance reports from critical service providers, and determine the required follow-up actions related to complementary controls, exceptions, or identified limitations.
• Identify, assess, and document IT control deficiencies, provide practical recommendations, and monitor remediation plans with relevant stakeholders.
• Plan and perform risk-based IT operational internal audits in areas such as cybersecurity, access management, change management, IT operations, third-party IT service providers, technology projects, and critical applications.
• Act as a business partner to the IT function to strengthen the IT internal control environment, support the remediation of control deficiencies, and promote the sustainable adoption of control best practices.
• Prepare concise management communications on risks, audit findings, recommendations, action plans, and the status of IT-related initiatives and activities.
• Support the Internal Audit team in leveraging data analytics to enhance the efficiency, coverage, and value of audit activities, including developing analytical routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Auditing, Risk Management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, IT general controls (ITGCs), application controls, cybersecurity, or IT risk management.
• CISA certification strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or an equivalent certification is considered an asset.
• Practical knowledge of IT general controls (ITGCs), application controls, report controls, and audit testing methodologies.
• Ability to review and assess SOC 1, SOC 2, ISAE 3402, and other assurance reports issued by critical service providers.
• Knowledge of data analytics tools (e.g., Power BI); experience with SAP is considered an asset.
• Excellent communication, stakeholder management, collaboration, and project management skills, with the ability to manage multiple deliverables and work effectively with IT, Finance, Operations, and external audit stakeholders.
• Oral and written fluency in French and English *

*A good knowledge of French is required for positions in Quebec. The incumbent will be required to communicate and collaborate frequently in English, both orally and in writing, with colleagues, customers, and other stakeholders in Quebec, the rest of Canada, and internationally.

Additional Information

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

#LI-AE1

Employment Equity

At Transat, we foster an environment where inclusiveness, respect and equity reign. We endeavour to build a workforce that reflects the diversity of our customers as well as the communities to which we travel. We encourage women, members of visible minorities, ethnic minorities, aboriginal peoples as well as people with disabilities to submit their candidacy. Transat will accommodate people with disabilities throughout the recruitment and selection process. If you require an accommodation, please contact us in order to work together in meeting adequately your needs.