Internal Auditor

What are your contributions to the team?

• Perform comprehensive audits of IT General Controls, including logical access, change management, data processing, and backup/recovery processes. Identify control gaps and provide recommendations for remediation. Participate in the creation and elaboration of the yearly internal audit plan Based on risk assessments.
• Conduct IT risk assessments to identify and evaluate key IT-related risks. Assist in developing annual audit plans based on risk exposure.
• Develop and maintain IT audit documentation, including process flows, risk-control matrices, and testing strategies. Test the design and effectiveness of ITGC controls, reporting on weaknesses and inefficiencies.
• Ensure compliance with relevant regulatory and industry standards (e.g., SOX, SOC, PCI-DSS) by evaluating IT systems and processes. Collaborate with stakeholders to align audit practices with standards.
• Assess the effectiveness of data integrity controls and access management controls to ensure that sensitive information is protected and accurately maintained.
• Work closely with IT, security, and business teams to understand control requirements, share audit findings, and ensure remediation of issues. Provide advisory support in implementing effective ITGC frameworks.
• Stay updated on best practices and emerging trends in ITGC, risk management, and auditing standards. Recommend process improvements to enhance control effectiveness and efficiency.
• Prepare and present clear, actionable audit reports and executive summaries to senior management, highlighting findings, risks, and recommended corrective actions.

How to thrive in this role? Skills, knowledge & experience:

• You hold a bachelor’s degree in Information Technology, Information Systems, Finance, or a related field.
• Possess CISA, CIA, or other relevant certifications (an asset)
• You have a minimum of 4 years of experience in IT auditing, ITGC, or a similar role
• You have experience with regulatory frameworks such as SOX, SOC, and/or PCI-DSS
• You have experience in testing ITGC controls (access and change management, operations, and data backup/recovery)
• You possess skills to use data analysis tools (Excel, SQL), SAP, S4HANA and cloud computing controls
• You have a good understanding of IT infrastructure, networks, databases, and application controls
• You have good spoken and written communication skills in English and in French
• You are able to work both independently and collaboratively in a fast-paced environment
• You have the ability to travel when required (15% of the time)