Senior IT Auditor

Senior IT Auditor

Location:

Markham, ON

Salary: $90,000 - $115,000 CAD

Employment Type:

Full Time

Our client is seeking a Senior IT Auditor to join their growing global organization in Markham. This role will work closely with IT, Information Security, Operations and Internal Audit teams to assess and strengthen IT controls, cybersecurity practices, risk management and compliance across a global environment.

The successful candidate will be responsible for executing IT General Controls (ITGC), SOX and operational audits, identifying areas of risk, evaluating control effectiveness and providing practical recommendations to improve the organization's overall security and control environment.

• 3-5 years of progressive IT audit experience, with strong experience in information security and IT controls.
• Hands-on experience with IT General Controls (ITGC), SOX testing and operational IT audits.
• Strong understanding of information security risk management frameworks and compliance practices.
• Experience assessing technology infrastructure, applications, networks, data centers and cybersecurity environments.
• Experience with risk assessments, control testing, audit planning and audit execution.
• Strong knowledge of IT security controls, cybersecurity risks and regulatory compliance.
• Experience responding to, analyzing and communicating information security incidents.
• Strong analytical and problem-solving skills, including the ability to identify trends, root causes and control weaknesses.
• Excellent written and verbal communication skills, including formal audit report writing and presentations.
• Strong stakeholder management skills and the ability to work effectively with both technical and non-technical stakeholders.
• Bachelor's degree in Information Systems, Computer Science, Information Technology or a related discipline.
• CISA or CISSP certification is an asset.
• Strong attention to detail, organizational skills and a proactive approach to problem solving.
• Ability to manage multiple priorities in a fast-paced, dynamic environment.
• Willingness to travel internationally as required.

• IT Audit & Risk Management
• Assist the Senior Audit Manager in executing an integrated, value-added IT audit program focused on IT General Controls.
• Execute IT audit engagements, including operational audits and SOX testing, with exposure to global business units and international operations.
• Perform risk assessments to identify technology, cybersecurity, operational and compliance risks.
• Assess the adequacy and effectiveness of IT and information security controls across systems, infrastructure and business processes.
• Develop risk-based audit procedures and work plans based on identified business and technology risks.
• Conduct audits of IT systems, infrastructure, applications, networks and data centers.
• Evaluate compliance with applicable laws, regulations, internal policies and industry standards.
• IT Security & Cybersecurity
• Assess information security controls and identify potential vulnerabilities and control weaknesses.
• Support security incident investigation, risk analysis and compliance activities.
• Conduct vulnerability and penetration testing where required.
• Review security measures protecting organizational data, systems and networks.
• Support the identification, analysis and remediation of cybersecurity risks.
• Troubleshoot and assess security and network-related issues, including potential security breaches.
• Audit Execution
• Work closely with IT teams, local management and internal or co-sourced audit resources to understand business operations and technology environments.
• Plan and execute detailed audit engagements from scoping through completion.
• Document audit procedures, testing results, findings and conclusions in accordance with audit standards.
• Ensure audit work papers provide appropriate support for audit conclusions.
• Review controls over existing systems to ensure compliance with regulatory requirements and internal policies.
• Develop project plans, audit programs and control evaluation frameworks.
• Reporting & Remediation
• Prepare and present audit reports to local and senior management, clearly communicating risks, control deficiencies and recommended remediation.
• Work with management to develop practical action plans and process improvement opportunities.
• Maintain and manage the IT audit findings log.
• Monitor corrective actions and follow up on outstanding remediation activities.
• Escalate significant discrepancies or unresolved risks to appropriate corporate management.
• Present audit conclusions and recommendations to IT and Audit leadership.
• Provide clear, concise and actionable recommendations to strengthen the overall control environment.
• Stakeholder Management
• Build strong working relationships with IT, Information Security, Operations, Internal Audit and business leadership.
• Partner with management to develop cost-effective and sustainable IT internal controls.
• Communicate complex technical and security matters…