Senior IT Internal Auditor

Air Transat; Quebec; On-site; CAD 90,000 - 120,000; Full time

Job summary

Air Transat in Quebec is seeking an IT audit specialist to plan and execute control testing under Regulation 52-109, focusing on IT general controls and reporting controls. You will collaborate with external auditors, document the IT control environment, and lead an IT audit program covering cybersecurity, access, changes, operations, and critical applications.

The role requires 5–8 years of IT audit experience, certifications like CISA, and fluency in French and English; bilingual environment

Qualifications

• Bachelor’s degree in information systems or related field.
• 5 to 8 years of relevant IT audit experience.
• CISA strongly desired; CPA, CIA, CRMA, CRISC, CISSP, CISM or equivalent certification is an asset.
• Practical knowledge of ITGCs, application controls, reporting controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402 reports or other assurance reports from critical vendors.
• Knowledge of data analytics tools (Power BI), knowledge of SAP an asset.
• Excellent communication, collaboration, and stakeholder management skills in IT, finance, operations, and external auditors.
• Fluent in French and English; good command for Quebec positions.

Responsibilities

• Plan, execute, and document IT audit work related to IT controls and ISAE 3402/SOC reports.
• Act as a key contact with the external auditor for IT controls and coordinating requests.
• Structure and maintain documentation of the IT control environment and inventories.
• Analyze assurance reports and determine necessary follow‑ups for deficiencies.
• Identify, document, and follow up remediation of IT control deficiencies with stakeholders.
• Plan risk‑based operational IT internal audits including cybersecurity, access, changes, and critical applications.
• Partner with the CIO to strengthen IT internal controls and drive remediation.
• Prepare concise management communications on IT risks, findings, and progress.
• Support analytics in audit work using Power BI and other tools.

Skills

IT audit

Internal controls

Cybersecurity

Data analytics

Power BI

Communication

Education

Bachelor's degree in information systems or related field

Tools

SAP

Job description

Description of the company

Be part of the journey!

Our mission is to be the preferred airline for our customers and our team.

Open-mindedness, care for others, intelligence at work and above all a good dose of fun allow us to achieve great things every day. Our commitment has earned us the title of world's best leisure airline on several occasions, and this is just the beginning.

Want to join us? You will have the chance to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You will also have the opportunity to work in modern and inspiring work environments.

Job Description

Under the management of the Senior Director, Internal Audit and Integrated Risk Management, the incumbent acts as an expert in IT audit and internal controls related to information technology. They contribute to the evaluation of the internal control system for financial reporting within the framework of Regulation 52-109, while developing a risk‑based operational IT internal audit coverage.

Their role includes planning and executing control tests, organizing the documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and monitoring control deficiencies.

The position also includes managing an IT audit program, including identifying and carrying out internal IT audit mandates.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls, and reporting controls.
• Act as a key point of contact with the external auditor for work related to IT controls, including coordinating requests, evidence, and follow‑ups.
• Structure and maintain documentation of the IT control environment, including the inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402 or other assurance reports from critical vendors and determine required follow‑ups for complementary controls, exceptions, or limitations identified.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and ensure follow‑up of remediation plans with relevant stakeholders.
• Plan and carry out risk‑based operational IT internal audits, particularly in the areas of cybersecurity, access, changes, operations, IT vendors, technology projects, and critical applications.
• Act as a business partner to the CIO to strengthen the IT internal control environment, guide the remediation of deficiencies, and sustainably integrate good control practices.
• Prepare concise communications for management on IT risks, findings, recommendations, action plans, and work progress.
• Support the internal audit team in using analytics to increase the efficiency, coverage, and value of audit work, including creating analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA strongly desired; CPA, CIA, CRMA, CRISC, CISSP, CISM or equivalent certification is an asset.
• Practical knowledge of ITGCs, application controls, reporting controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402 reports or other assurance reports from critical vendors.
• Knowledge of data analytics tools (e.g., Power BI), knowledge of SAP an asset.
• Excellent communication, popularization, collaboration, and management skills for multiple deliverables with IT, finance, operations stakeholders, and external auditors.
• Fluent in spoken and written French and English *

*A good command of French is required for positions in Quebec. The incumbent will frequently communicate in English, both orally and in writing, with colleagues, clients, or other stakeholders, both in Quebec and internationally.

Additional Information

Please note that the internal job title may differ from the displayed title.

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

Employment Equity

Transat is committed to fostering an inclusive and respectful environment where equity is paramount. We strive to build a workforce that reflects the diversity of our customers and the communities in which we travel. We therefore encourage women, visible minorities, ethnic minorities, Indigenous peoples, and people with disabilities to apply. Transat will accommodate people with disabilities throughout the selection and hiring process. If you require accommodations, please contact us so that we can appropriately meet your needs together.