Sr. Analyst, Audit, Attestations & Governance

Brookfield Asset Management, Inc.; Toronto; On-site; CAD 80,000 - 100,000; Full time

Job summary

Brookfield Asset Management, Inc. is seeking a Senior Analyst to support internal and external audits, perform attestation, and drive governance within the IT Risk & Compliance program. You will coordinate evidence, assess design and operating effectiveness, and partner with stakeholders to mitigate risk.

The role focuses on audit readiness, control assessments, and collaborative efforts across cloud and security environments. A strong background in IT risk and compliance is required.

Qualifications

• 2-5 years of experience in IT risk, compliance, or audit functions.
• Experience supporting SOX and IT audits, ITGC testing within SOX programs, and assessments such as NIST and SWIFT CSP.
• Experience with cloud and security governance, including cloud audits and risk assessments.
• Vendor risk management or third-party assessments are a plus.
• Experience with governance and reporting tools like AuditBoard and OneTrust is a plus.
• Experience with SOC 1/SOC 2 reviews and audit coordination.
• Knowledge of security vulnerability management concepts.

Responsibilities

• Support internal and external audits by coordinating requests, gathering evidence, and facilitating discussions.
• Execute control assessments and compliance reviews to evaluate design and operating effectiveness.
• Perform vendor risk assessments and review third-party control reports from an IT risk standpoint.
• Validate control deficiencies and track remediation activities to completion.
• Collaborate with stakeholders to assess risk and provide recommendations for mitigation.
• Support development and enhancement of reporting tools and dashboards.
• Contribute to governance processes related to cloud and security environments.
• Identify opportunities to improve processes and enhance efficiency.

Skills

Analytical thinking

Problem-solving

Communication skills

Collaboration

GRC platforms knowledge

Education

Bachelor's degree in information technology or accounting

CISA/CISSP certification (preferred)

Tools

AuditBoard

OneTrust

ServiceNow

Job description

Location

Brookfield Place - 181 Bay Street

Technology Services

Technology Services (TS) is responsible for delivering all enterprise infrastructure, applications and related end user technology services across all Brookfield business groups.

Brookfield Culture

Brookfield has a unique and dynamic culture. We seek team members who have a long-term focus and whose values align with our Attributes of a Brookfield Leader: Entrepreneurial, Collaborative and Disciplined. Brookfield is committed to the development of our people through challenging work assignments and exposure to diverse businesses.

Job Description

Department: Technology Services (IT Risk & Compliance)

Reports To: ITRC Manager

Role Summary

The Senior Analyst is responsible for supporting internal and external audit, execute attestation, and governance activities within the IT Risk and Compliance program. This role supports audit readiness, performs control assessments, and collaborates with stakeholders to ensure compliance with internal policies and external requirements. The position focuses on delivering high-quality audit support and governance outcomes.

Key Responsibilities

• Support internal and external audits by coordinating requests, gathering evidence, and facilitating discussions
• Execute control assessments and compliance reviews to evaluate design and operating effectiveness
• Perform vendor risk assessments and review third-party control reports from an IT risk standpoint.
• Validate control deficiencies and track remediation activities to completion
• Collaborate with stakeholders to assess risk and provide recommendations for mitigation
• Support the development and enhancement of reporting tools and dashboards
• Contribute to governance processes related to cloud and security environments
• Identify opportunities to improve processes and enhance efficiency

Required Experience

• 2-5 years of experience in IT risk, compliance, or audit functions
• Experience supporting SOX and IT audits, ITGC testing within SOX compliance programs, and compliance assessments such as NIST and SWIFT Customer Security Programme (CSP)
• Experience with cloud and security governance practices, including basic knowledge of cloud environments and experience supporting cloud audits and cloud risk assessments
• Experience in IT vendor risk management or third-party assessments is a good to have
• Experience working with governance and reporting tools such as AuditBoard, OneTrust is a plus.
• Experience with SOC 1/SOC 2 report reviews and audit coordination
• Basic knowledge of security vulnerability management practices and processes

Skills & Qualifications

• Strong analytical and problem-solving skills
• Understanding of IT control frameworks and compliance practices
• Effective communication and collaboration skills
• Ability to manage multiple priorities and deadlines
• Knowledge of GRC platforms such as OneTrust and AuditBoard
• Understanding of cloud environment risks and security vulnerability management concepts

Preferred Qualifications

• Bachelor's degree in information technology or accounting fields.
• Professional certifications such as CISA and/or CISSP.
• Experience with ServiceNow is an added advantage

Salary Range: $80,000 - $100,000 CAD

Position Opening Reason:

New Position

Brookfield is committed to maintaining a Positive Work Environment that is safe and respectful; our shared success depends on it. Accordingly, we do not tolerate workplace discrimination, violence or harassment.

Brookfield is committed to creating an accessible and inclusive organization. We are committed to providing barrier-free and accessible employment practices in compliance with the Accessibility for Ontarians with Disabilities Act. Should you require a Human Rights Code-protected accommodation through any stage of the recruitment process, please make them known when contacted and we will work with you to meet your needs.