IT Auditor

Aston Carter•Toronto, ON

5d•CA$60 - CA$80•Hybrid

About The Position

This role focuses on providing assurance over IT and business process controls, performing external audits, delivering third-party reporting, and advising clients on IT risk and control environments. You will support financial statement audits and standalone reviews by planning and executing IT audit and IT risk advisory engagements, helping clients strengthen their IT general controls and comply with regulatory and reporting requirements.

Requirements

Minimum of 3 years of experience in IT auditing, including planning and executing IT audit engagements.
Minimum of 3 years of experience in document control testing and related documentation activities.
Hands-on experience with IT General Controls (ITGC), including access management, change management, and computer operations.
Practical experience in IT audit and external audit support, including SOC 1 and SOC 2 related work.
Strong understanding of IT controls, internal control frameworks, and risk management principles.
Experience supporting SOX compliance and ICFR programs, including control testing and remediation.
Ability to interface confidently with clients, including participating in meetings, presenting findings, and discussing recommendations.
Proficiency in audit methodologies, control testing techniques, and quality control practices.
Strong written communication skills to draft clear and concise audit findings and client deliverables.
Strong verbal communication and interpersonal skills for effective collaboration with auditors, internal teams, and client stakeholders.
IT Specialist Accreditation (or the ability and willingness to obtain it, with training support provided).

Nice To Haves

Experience working with key enterprise systems such as ERP platforms, core banking systems, and cloud environments.
Familiarity with SOC 1 and SOC 2 reporting frameworks and related third-party assurance engagements.
Exposure to internal audit functions and client advisory work in IT risk and controls.
Professional certifications such as CISA or similar IT audit credentials are highly beneficial.
Experience in quality control, control testing, and document control processes.
Demonstrated ability to manage multiple engagements and meet deadlines in a dynamic environment.
Comfort working with a range of stakeholders, including external auditors, internal audit teams, and business process owners.
Open to candidates with 1–3 years of experience for more junior-level opportunities.

Responsibilities

Plan and execute IT audit and IT risk advisory engagements in support of financial statement audits and standalone reviews.
Provide assurance over IT and business process controls to support external audit and reporting requirements.
Perform external IT audits and deliver third-party reporting, including SOC-related engagements.
Assess the design and operating effectiveness of IT General Controls (ITGC), including access management, change management, and computer operations.
Perform control testing across key systems such as ERP platforms, core banking systems, and cloud-based environments.
Evaluate automated and configurable application controls to determine adequacy and effectiveness.
Support SOX and ICFR compliance programs, including testing, documentation, and remediation efforts.
Identify control gaps and weaknesses, assess associated risk impact, and recommend practical, actionable improvements.
Draft clear, concise audit findings, reports, and other client deliverables that communicate issues and recommendations effectively.
Collaborate closely with external auditors, internal audit teams, and client stakeholders to coordinate audit activities and share insights.
Interface directly with clients to discuss audit scope, findings, recommendations, and ongoing control improvements.
Perform document control testing and maintain thorough documentation of testing procedures and results.
Contribute to proposal development and support client relationship management activities as needed.
Coach and review work performed by junior team members, providing guidance and feedback to support their development.