Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Audit, Risk Management or related field.
• 5-8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA certification preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM or equivalent certification is a plus.
• Practical knowledge of ITGC, application controls, reporting controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical vendors.
• Familiarity with data analytics tools (e.g., Power BI) and knowledge of SAP is an asset.
• Excellent communication, collaboration, and multitasking skills with various stakeholders across IT, finance, operations, and external auditors.
• Fluency in both French and English, as frequent communication is required in both languages.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 program, including ITGC, application controls, and reporting controls.
• Serve as a key contact for external auditors regarding IT control work, coordinating requests, evidence, and follow-ups.
• Structure and maintain documentation of the IT control environment, including controls inventory, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical vendors to identify follow-ups needed for complementary controls, exceptions, or limitations noted.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and follow up on remediation plans with relevant stakeholders.
• Plan and conduct operational IT internal audits based on risk, especially in areas like cybersecurity, access, changes, operations, IT vendors, technological projects, and critical applications.
• Partner with the IT department to enhance the internal control environment, guide remediation of deficiencies, and integrate control best practices sustainably.
• Prepare concise communications for management regarding risks, findings, recommendations, action plans, and progress updates.

Benefits

• Opportunities for professional development and certification support.
• Access to data analytics tools and technologies to enhance work efficiency.
• Collaborative work environment across different departments and teams.
• Involvement in critical audits that impact the organization’s risk management strategy.