IT Audit Manager

Description

As a key member of the Internal Audit Services (IAS) team, the IT Audit Manager is accountable for planning and executing risk-based, process focused IT audit assignments and IT General Control (ITGC) Testing with the goal to the overall risk/control environment of Client.

• Assess audit findings to derive risk / control stated recommendations
• Promote compliance to companies policies and procedures, standards, and guidelines
• Maintain and develop current and professional knowledge to enhance and complement work skill set
• Lead testing of assigned ITGCs in support of 52-109 certification. Test and document design and operating effectiveness of controls in a timely and efficient manner, clearly identify and communicate control weaknesses to the relevant internal and external stakeholders
• Document audit testing and audit test results in audit working papers that meet Internal Audit and IIA standards and communicate findings to IT Audit Portfolio Managers in a clear and concise manner
• Assist in execution of audit plans by assessing risks, design adequacy and operating effectiveness of IT and cybersecurity controls for various IT processes including but not limited to access, network security, vulnerability and patching, endpoint security, data security, cloud security, logging and monitoring, and change and incident management
• What you'll do: Support the execution and completion of IT and cybersecurity process audits by assisting in performing risk assessments and developing detailed audit plans
• Leverage artificial intelligence technologies such as large language models (LLMs) to enhance the efficiency and effectiveness of audit execution
• Design IT audit data analytics, execute testing and analyze the results

Requirements

• Knowledge and experience with data analytics tools
• Technical knowledge of various IT infrastructure and network components such as operating system (Windows, Linux), databases (Oracle), and network
• Proficiency with process mapping of controls, systems and processes
• Detail-oriented with strong organizational abilities
• Experience with IT process/controls, auditing practices, ITGC testing, and principles relevant to completing risk and control assessments
• Excellent relationship management, time management, organization, planning, and process mapping skills
• University degree and CISA certification desired
• Knowledge of various industry regulations such as 52-109, PCI, PIPEDA, and GDPR
• Superior verbal and written communication skills sufficient to prepare and communicate audit findings dealing with facts and concepts for presentations to client executives and external auditors
• Strong understanding of public cloud networking and network security controls on platforms such as Azure, GCP, AWS
• Ability to take initiative and work independently and in a team environment
• Strong skills in MS Excel, ideally experience with pivot tables and v-lookup. Knowledge of VBA would be an asset
• What you bring: 4+ years of IT audit or information technology experience with focus on cybersecurity or risk management
• Solid working knowledge and application of IT, cybersecurity, and service organization reporting control frameworks, specifically COBIT, NIST, and SOC (1 and 2)

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance