Information Security Auditor - Canada - (SMB)

Cognisys • Alberta, AB

21h • Remote

About The Position

Our GRC practice helps organisations strengthen their security posture, achieve certification, and maintain effective governance through structured, evidence-based assurance. We operate a modern, forward-thinking audit function that assesses organisations against both established industry standards and emerging security and privacy frameworks. By combining deep expertise with leading audit and GRC tooling, we deliver high-quality, efficient, and insight-driven assurance that provides clarity, confidence, and measurable improvement. We work with clients across a wide range of industries and maturity levels, supporting everything from foundational compliance programmes to complex, multi-standard environments.
We are seeking an Information Security Auditor to join our GRC team. This is a client-facing, delivery-focused role suited to a detail-oriented assurance professional who is confident planning and performing audits, evaluating control effectiveness, and producing clear, actionable findings. You will be part of a high-performing audit function that embraces innovation, modern methodologies, and best-in-class tooling to deliver efficient, high-impact assurance engagements.
As an Information Security Auditor, you will deliver audit engagements across multiple clients and frameworks, assessing compliance against recognised standards as well as emerging regulatory and security requirements. You will support organisations in preparing for certification and external assurance, working closely with consultants, project managers, and client stakeholders to ensure audit activities are thorough, objective, and aligned to professional audit standards. You will also contribute to a progressive audit environment that continuously evolves its methods, technology, and approach to reflect the changing security landscape.
This role suits someone with strong foundational audit knowledge, practical experience with security and management system frameworks, and a desire to develop as a trusted assurance professional within a growing, technology-driven GRC practice.

Requirements

• 2+ years experience conducting or supporting audits, ideally within security, risk, or compliance environments.
• Practical experience with at least one ISO management system standard (ISO 27001 strongly preferred).
• Internal Auditor or Lead Auditor training is advantageous.
• Strong written and verbal communication skills, with the ability to present findings clearly and professionally.
• Analytical mindset with the ability to assess controls, validate evidence, and form objective conclusions.
• Excellent attention to detail and a structured, methodical approach to work.
• Ability to manage multiple engagements and competing priorities.
• Comfortable working independently and collaboratively within client-facing teams.

Nice To Haves

• Internal Auditor or Lead Auditor training is advantageous.

Responsibilities

• Lead and support the delivery of audit engagements across multiple clients and sectors.
• Plan and conduct audits against recognised management systems and security frameworks.
• Evaluate the design and effectiveness of controls through documentation review, sampling, and stakeholder interviews.
• Gather, validate, and document audit evidence in line with established methodologies.
• Identify non-conformities, observations, and opportunities for improvement.
• Prepare structured audit reports with clear, risk-based findings and practical recommendations.
• Support clients in understanding audit outcomes and next steps for remediation.
• Conduct audit interviews with client stakeholders at operational and management levels.
• Support organisations preparing for certification, surveillance, or external assessments.
• Collaborate with Information Security consultants and project managers during wider client engagements.
• Provide assurance insights that inform risk management and control improvement activities.
• Maintain professional independence and objectivity throughout audit engagements.
• Apply consistent audit methodology aligned to recognised assurance practices.
• Produce high-quality documentation with clarity, accuracy, and traceable evidence.
• Manage audit timelines, deliverables, and engagement scope effectively.
• Maintain confidentiality, professional ethics, and impartiality in all activities.
• Contribute to the continuous improvement of internal audit processes, templates, and approaches.

Benefits

• A dynamic and supportive work environment where customer care and innovation drive everything we do.
• A dedicated budget for your professional development
• Access to an Employee Wellness Hub supported by Kara Connect for health and well-being resources.
• Frequent team social events and celebrations.
• 25 days holiday leave, plus a birthday holiday.
• Refer a friend bonus scheme, up to £2,000!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed