We are seeking a detail-oriented Manager, Internal Controls for our Internal Controls Team. In this role, you will play a key part in our internal controls function and the testing for the ICFR Program for NI-52-109 compliance. You will support the Director of Risk and Controls to provide independent, objective assurance, and assist senior management in fulfilling their oversight role for risk management, internal control, and governance requirements from an IT perspective.

Responsibilities

• Plan and execute IT audits covering areas such as access controls, change management, data security, network infrastructure, cloud environments, and business continuity/disaster recovery;
• Assess the design and operating effectiveness of IT general controls (ITGCs) and application controls;
• Evaluate compliance with frameworks and regulations such as 52-109;
• Identify control gaps, security vulnerabilities, and process inefficiencies; document findings and recommend remediation;
• Prepare clear, well-supported audit papers and reports for management and stakeholders;
• Supervise Internal Controls analysts, provide coaching and review their work papers for business controls;
• Collaborate with IT and business units to understand systems, processes, and emerging risks;
• Track remediation of audit findings and verify corrective actions are implemented;
• Support external auditors as needed for ITGC and business controls;
• Stay current on emerging technology risks (e.g., cloud, AI, cybersecurity threats) and evolving regulatory requirements;
• Assist in risk assessments to help shape the annual audit plan.

Qualifications:

• 10+ years of experience in IT internal controls within a mid- to large-sized public accounting firm (advisory) or public corporation;
• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field;
• CPA certification and CISA certification (or in the process of obtaining); CIA and CRMA certifications are assets;
• Commitment to excellence in the work that you do;
• Attention to detail and strong professional skepticism;
• Project management and time management across multiple concurrent audits;
• Collaborative, with the ability to build relationships across technical and business teams;
• Integrity and sound ethical judgment;
• Solid understanding of IT general controls, SDLC, network/infrastructure concepts, and data security principles;
• Familiarity with audit and control frameworks (COBIT, SOX, 52-109);
• Strong analytical, problem-solving, and report-writing skills;
• Ability to communicate technical findings clearly to non-technical stakeholders;
• Bilingualism (French and English) is required for daily communication with suppliers, employees, and stakeholders, both within and outside of Quebec.

At GDI, you will be part of a growing organization that understands the importance of investing in people and offers you:

• A comprehensive compensation package that includes performance-driven bonuses;
• A group retirement savings program with employer matching;
• Flexible group insurance with personalized coverage that meets your needs;
• An employee discount at Garage and Dynamite;
• Exclusive private sample sales;
• A flexible vacation policy;
• And more!

Candidates that are retained will be called for an interview.#NR-LI1