Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Audit, Risk Management, or related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, IT general controls, application controls, cybersecurity, or IT risk management.
• CISA preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM or equivalent certification is a plus.
• Practical knowledge of ITGCs, application controls, reporting controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402 or other critical vendor assurance reports.
• Familiarity with data analytics tools (e.g., Power BI); knowledge of SAP is a plus.
• Strong communication, simplification, collaboration skills, and ability to manage multiple deliverables with IT, finance, operations stakeholders, and external auditors.
• Fluent in both French and English, with a good command of both languages required for communication with colleagues and stakeholders. NR

Responsibilities

• Plan, execute, and document IT audit activities related to Regulation 52-109, including IT general controls, application controls, and reporting controls.
• Act as the primary contact for external auditors regarding IT controls, coordinating requests, evidence, and follow-ups.
• Structure and maintain documentation of the IT control environment, including inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other critical vendor assurance reports and determine necessary follow-ups for additional controls, exceptions, or limitations identified.
• Identify, qualify, and document IT control deficiencies, provide practical recommendations, and monitor remediation plans with relevant stakeholders.
• Plan and conduct risk-based internal IT operational audits in key areas such as cybersecurity, access, changes, operations, IT vendors, technology projects, and critical applications.
• Act as a business partner to IT management to strengthen the internal IT control environment, guide remediation of deficiencies, and sustainably integrate best control practices.
• Prepare concise communications for management on risks, findings, recommendations, action plans, and audit progress.
• Support the internal audit team in utilizing analytics to enhance the efficiency and coverage of audit activities, including creating analytical routines using Power BI and other relevant tools.

Benefits

• Dynamic work environment that encourages innovation.
• Opportunities for professional development and certifications.
• Flexible work arrangements to support work-life balance.
• Collaborative culture that values teamwork.
• Access to comprehensive health and wellness programs.