IT Audtor

GFL Environmental Inc.•Vaughan, ON

About The Position

GFL is looking for a talented IT Audit Analyst to join their team. This role will support the Internal Audit function in executing IT audit and compliance activities across the organization’s technology control environment. Reporting to the Senior Manager, this role provides hands-on exposure to ITGC testing, SOX compliance, and risk assessment in a complex, multi-entity enterprise environment.

Requirements

1–2 years of experience in IT audit, external audit, SOX compliance, or a related risk/controls role.
Bachelor’s degree in accounting, computer science, IT, or a similar field.
CISA and/or CPA designation (or actively pursuing) is required or considered a strong asset.
Ability to execute internal audits (planning, risk identification, and procedure development).
Highly organized with strict attention to detail.
Ability to manage multiple workstreams.
Strong communication skills to explain complex technical concepts to non-technical stakeholders.
Valid work authorization in the country where the job is located is required.
Successful candidates will be required to provide valid documentation confirming their eligibility to work in the country where the job is located prior to their start date.

Nice To Haves

Prior experience supporting audit teams with SOX compliance and data analytics tools is a plus.
Exposure to SOX programs and experience with ERP systems, Workday, ServiceNow, AWS, or home-grown applications is desired.

Responsibilities

Assist in planning and executing IT audit engagements across logical access, change management, computer operations, and backup domains.
Assess and test embedded IT application controls, system-generated reports, and interfaces.
Test the design and operating effectiveness of IT controls, document findings, and prepare supporting workpapers.
Coordinate with stakeholders to gather evidence, validate control execution, and contribute to scoping, testing, and deficiency reporting.
Help monitor, follow up on, and track management action plans and remediation activities for identified deficiencies and audit findings.
Perform data analytics on large datasets from key SOX systems to identify trends, anomalies, and exceptions, while staying current on emerging technology and cybersecurity risks.