Overview

Position Title: Corporate Senior IT Auditor

Department: Corporate Internal Audit

Report to: Senior Manager, Audit & Compliance, IT

Salary Range : $ 84,000 - $115, 500 CAD

Job Summary

As a Senior IT Auditor, you will serve as a trusted advisor responsible for analyzing and assessing ATS' IT landscape to ensure data, processes, and systems run accurately, efficiently, and securely to meet the organization's objectives. You will lead and execute IT audit engagements, with a significant focus on SOX (Sarbanes-Oxley) compliance, while also supporting various operational projects using established IT auditing standards within the Corporate Internal Audit (IA).

This role involves developing, implementing, testing, and evaluating IT internal controls. You'll be responsible for conducting IT-related audit engagements and other various operational projects using an established IT auditing standard within the Corporate Internal Audit (IA). IT audit procedures cover areas such as:

• Backup and Recovery (B&R),
• Change Management (CM),
• Cybersecurity (CYB),
• Business Continuity and Disaster Recovery (DR),
• Interface (INT),
• Job Scheduling (JBS),
• Manage Security (MS),
• Problem Incident Management (PIM),
• IT Infrastructure (INF),
• IT Application Controls (ITACs),
• Information Provided by the Entity (IPE)

Responsibilities

• Lead and perform IT General Controls (ITGC) and IT Application Controls (ITAC) testing, including those related to SOX compliance, making necessary adjustments based on new information and identified risks
• Prepare and review audit working papers in accordance with audit standards and internal audit procedures
• Conduct follow-up procedures to ensure appropriate audit evidence is obtained, validated, and used for testing controls in a timely manner
• Write clear, concise, and constructive audit findings based on facts, severity, and risks, and present these findings to senior management
• Perform root cause analysis to identify causes of control deficiencies and provide relevant and appropriate recommendations
• Provide periodic audit status, control testing results, and/ or any challenges to meet audit deadlines
• Mentor and provide guidance to junior auditors, enhancing their skills and knowledge
• Establish and maintain effective working relationships with the Clients/ Auditees
• Some travel may be required

Qualifications

• 4-6 years of IT auditing experience, including SOX audits, either through a firm (IT audit/advisory) or a publicly traded company
• Hold a bachelor's degree in Business and Accounting, Information Technology, Computer Science, or a related field
• CISA (required) and CPA, CISSP, CIA, CRISC, CDMP, CIMP, CAMS designations are highly preferred
• Advanced knowledge of IT auditing standards and control frameworks such as IIA, COBIT, NIST, CSF, and ISO27001
• Strong experience in internal audit practices, and financial and operational process documentation
• Demonstrated ability to evaluate internal controls, lead and execute complex audits independently, analyze and solve complex problems, and conduct research
• Ability to manage multiple projects concurrently and meet tight deadlines
• Strong practical knowledge of audit methodologies, control methodologies, and risk mitigation
• Excellent communication skills with an ability to express ideas clearly, concisely, and persuasively both verbally and in writing
• Proficiency with ACL software (Audit Command Language) or other data analytics tools and ability to conduct data analysis is an asset
• A familiarity with ACL software (Audit Command Language) or other data analytics tool and ability to conduct data analysis is an asset

The Compensation offered will be based on the local job market and may vary depending on factors such as the job-related knowledge, skills, experience of the selected candidate, as well as other objective business considerations. Subject to these considerations, the total compensation package for this position may also include other elements, such as an annual cash incentive in addition to a full range of medical, retirement, and/or other benefits. Details of these benefit plans will be provided when the selected job candidate receives an offer of employment.

This role represents an existing vacancy within the organization.