Senior IT Internal Auditor

Air Transat; Montreal (administrative region); On-site; CAD 90,000 - 130,000; Full time

Job summary

Air Transat is seeking an IT Audit Senior to lead IT control testing and risk assessment under ICFR and regulatory guidelines. The role involves coordinating with the external auditor, maintaining IT control documentation, and driving remediation of deficiencies.

You will perform risk-based IT audits across cybersecurity, access management, change management, and IT operations while collaborating with IT, Finance, and Operations. Bilingual French and English is required.

Qualifications

• Bachelor’s degree in IT or related field; 5–8 years IT audit experience.
• CISA strongly preferred; other certifications are assets.
• Knowledge of ITGCs, application controls, report controls, and audit testing methodologies.
• Fluent in French and English.

Responsibilities

• Plan, execute, and document IT audit activities related to IT general controls, application controls, and report controls.
• Serve as primary contact for external auditor on IT control matters; coordinate requests and evidence collection.
• Structure and maintain documentation of the IT control environment, including inventories, systems, interfaces, and critical reports.
• Review SOC 1, SOC 2, ISAE 3402 and other provider assurance reports; determine necessary follow-up actions.
• Identify, assess, and document IT control deficiencies; provide remediation recommendations and monitor progress.
• Plan and perform risk-based IT operational internal audits in cybersecurity, access management, change management, IT operations, and third-party IT service providers.
• Partner with IT to strengthen internal controls and promote sustainable control practices.
• Prepare concise management communications on risks, findings, and action plans.
• Support data analytics usage in audit activities using Power BI and other tools.

Skills

IT audit

SOC reporting

Power BI

Bilingual English/French

Stakeholder management

Education

Bachelor's degree in Information Systems / Computer Science / Accounting / Business Administration / Auditing / Risk Management

CISA certification strongly preferred; CPA / CIA / CRMA / CRISC / CISSP / CISM or equivalent as asset

Tools

SAP

Job description

Our mission is to be the preferred airline of our customers and our team.

Open-mindedness, concern for others, intelligence at work and, above all, a healthy dose of fun enable us to achieve great things every day. Our dedication has earned us the title of the world's best leisure airline multiple times, and we’re just getting started.

Our mission is to be the preferred airline of our customers and our team.

Open-mindedness, concern for others, intelligence at work and, above all, a healthy dose of fun enable us to achieve great things every day. Our dedication has earned us the title of the world's best leisure airline multiple times, and we’re just getting started.

Job Description

Under the leadership of the Senior Director, Internal Audit and Enterprise Risk Management, the incumbent serves as a subject matter expert in IT audit and internal controls related to information technology. The role contributes to the assessment of the internal control over financial reporting (ICFR) framework in accordance with Regulation 52-109, while developing a risk-based IT operational internal audit coverage.

Key responsibilities include planning and executing control testing, maintaining documentation of the IT control environment, coordinating activities with the external auditor, and identifying, assessing, and monitoring control deficiencies.

The position also involves managing an IT audit program, including the identification, planning, and execution of IT internal audit engagements.

• Plan, execute, and document IT audit activities related to the 52-109 / ICFR program, including IT general controls (ITGCs), application controls, and report controls.
• Serve as the primary point of contact for the external auditor on IT control matters, including coordinating requests, evidence collection, and follow-up activities.
• Structure and maintain documentation of the IT control environment, including control inventories, systems, applications, interfaces, critical reports, and control owners.
• Review SOC 1, SOC 2, ISAE 3402, and other assurance reports from critical service providers, and determine the required follow-up actions related to complementary controls, exceptions, or identified limitations.
• Identify, assess, and document IT control deficiencies, provide practical recommendations, and monitor remediation plans with relevant stakeholders.
• Plan and perform risk-based IT operational internal audits in areas such as cybersecurity, access management, change management, IT operations, third-party IT service providers, technology projects, and critical applications.
• Act as a business partner to the IT function to strengthen the IT internal control environment, support the remediation of control deficiencies, and promote the sustainable adoption of control best practices.
• Prepare concise management communications on risks, audit findings, recommendations, action plans, and the status of IT-related initiatives and activities.
• Support the Internal Audit team in leveraging data analytics to enhance the efficiency, coverage, and value of audit activities, including developing analytical routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Auditing, Risk Management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, IT general controls (ITGCs), application controls, cybersecurity, or IT risk management.
• CISA certification strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or an equivalent certification is considered an asset.
• Practical knowledge of IT general controls (ITGCs), application controls, report controls, and audit testing methodologies.
• Ability to review and assess SOC 1, SOC 2, ISAE 3402, and other assurance reports issued by critical service providers.
• Knowledge of data analytics tools (e.g., Power BI); experience with SAP is considered an asset.
• Excellent communication, stakeholder management, collaboration, and project management skills, with the ability to manage multiple deliverables and work effectively with IT, Finance, Operations, and external audit stakeholders.
• Oral and written fluency in French and English

A good knowledge of French is required for positions in Quebec. The incumbent will be required to communicate and collaborate frequently in English, both orally and in writing, with colleagues, customers, and other stakeholders in Quebec, the rest of Canada, and internationally.

Additional Information

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

Employment Equity

At Transat, we foster an environment where inclusiveness, respect and equity reign. We endeavour to build a workforce that reflects the diversity of our customers as well as the communities to which we travel. We encourage women, members of visible minorities, ethnic minorities, aboriginal peoples as well as people with disabilities to submit their candidacy. Transat will accommodate people with disabilities throughout the recruitment and selection process. If you require an accommodation, please contact us in order to work together in meeting adequately your needs.