More jobs:
Job Description & How to Apply Below
Randstad Digital is seeking a Senior IT & Cybersecurity Control Testing Auditor for a high-impact contract mandate. Our client is a prominent global player within the financial services and investment banking sector. In this role, you will join a sophisticated risk management team to lead comprehensive reviews within the Annual Control Plan. You will play a pivotal role in evaluating, testing, and mitigating risks associated with information technology, information security, and cyber infrastructure across a complex, multi-jurisdictional environment.
Advantages
Competitive Compensation:
Highly attractive hourly contractor rate commensurate with senior-level expertise.
Dynamic Corporate Culture:
Work within a sophisticated, multinational financial environment that values diversity, collaboration, and continuous professional growth.
Cutting-Edge Environment:
Gain exposure to complex system architectures, modern data analytics pipelines, and advanced cloud technologies.
Hybrid Flexibility:
Enjoy a balanced professional lifestyle with a modern hybrid work model based out of our Montreal hub.
Responsibilities
Audit Planning & Execution:
Design, scope, and execute comprehensive technology and compliance audits focused on general IT controls and application-specific safeguards.
Process Walkthroughs:
Lead detailed walkthroughs of business and technology processes to understand operational contexts, map risk landscapes, and evaluate control designs.
Technical Validation:
Perform deep-dive assessments of system architectures, which include data analysis, code inspections, and system re-performance to validate security, system availability, and performance.
Issue Mitigation:
Detect vulnerabilities and control deficiencies through rigorous testing, and collaborate with business units to establish robust, timely corrective action plans.
Reporting & Communication:
Synthesize complex audit findings into high-quality, formal reports and deliver clear, actionable presentations to executive stakeholders and business leaders.
Stakeholder Engagement:
Maintain strategic, ongoing communication lines with Compliance, Risk management, and various lines of business, while assisting management in refining the annual risk-based audit plan.
Qualifications
Education:
Bachelor’s degree (B.A./B.S.) in Computer Science, Cyber Security, Engineering, or a related technical discipline.
Industry
Experience:
7 to 11 years of professional experience within financial services, investment banking, or broker-dealer corporate environments.
Audit Expertise: 3 to 5 years of specialized experience auditing physical, logical, system, or cybersecurity controls using industry-standard auditing frameworks.
Core Technical Knowledge:
Strong understanding of high-risk security domains, including Identity & Access Management (IAM), data encryption, firewalls, intrusion detection/prevention, and insider threats. Familiarity with non-technical pillars like IT governance and project management.
Frameworks & Regulations:
Proficiency with industry frameworks and regulations such as NIST, FFIEC, ISO, GDPR, NYSDFS, and FISMA, alongside an understanding of Investment Banking compliance and AML (Anti-Money Laundering) concepts.
Data & Scripting Capabilities:
Hands-on experience analyzing complex datasets using tools like Excel, Access, or VBA. Familiarity with scripting languages (Python), relational databases (T-SQL, PL/SQL), and data visualization software (PowerBI, Spotfire, Microstrategy) is highly desired. Cloud infrastructure audit experience is an asset.
Professional
Certifications:
Holding designations such as CISA, CISSP, CIA, CPA, or relevant securities licenses is considered a strong asset.
Screening Requirement:
Due to compliance obligations tied to US Federal Securities legislation, the selected candidate must be willing to undergo enhanced background vetting, which includes a third-party fingerprinting process managed via FINRA.
Our client operates in Canada. The company takes all reasonable steps to limit the number of positions in Quebec that require knowledge of a language other than French, and only requires it when necessary and its existing bilingual employees are unable to perform these duties. Based on an assessment conducted by our client, it has been determined that this position requires candidates to be fluent in English (both spoken and written).
In particular, this position will require the employee to interact with centralized internal departments (e.g., Operations / HR / Finance / Legal / Contracts / Sales) that support the organization in Canada and that do not speak French.
Summary
Location:
Montreal, QC (Hybrid)
Position Type:
Contract / Independent Consultant
Duration:
Long-term contract
Domain:
Financial Services / Investment Banking / Cybersecurity Audit
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion…
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×