It Auditor

Aston Carter•Ontario, CA

2d•CA$45 - CA$50•Hybrid

About The Position

The Corporate IT Auditor plays a key role within the Internal Audit function, assessing technology risks and internal controls across a global environment. This position focuses on IT audit and Sarbanes-Oxley (SOX) compliance activities to determine whether critical technology controls are properly designed, implemented, and operating effectively to support reliable financial reporting and core business objectives. Working under the direction of IT Audit leadership, the IT Auditor executes assigned testing, prepares clear and thorough audit documentation, communicates issues promptly, and builds strong working relationships with IT and business stakeholders.

Requirements

Experience in IT audit, including performance of SOX IT audit procedures and control testing.
Strong knowledge of IT General Controls (ITGCs), including access controls, security administration, change management, computer operations, backup and recovery, and infrastructure controls.
Strong understanding of IT Application Controls (ITACs) and automated controls supporting financial and operational processes.
Hands-on experience assessing Information Used in a Control (IUC) and Information Produced by the Entity (IPE), with a focus on completeness and accuracy.
Demonstrated ability to perform root cause analysis and develop practical recommendations for control deficiencies.
Solid understanding of SOX requirements and Sarbanes-Oxley (SOX) compliance related to IT controls and financial reporting.
Experience in risk and control assessment, including evaluating control design and operating effectiveness.
Ability to manage stakeholders effectively and build strong working relationships across IT, Finance, and business functions.
Knowledge of IT auditing standards and frameworks, including IIA standards, COBIT, NIST Cybersecurity Framework (CSF), and ISO 27001.
Proficiency in documenting audit procedures and evidence clearly and accurately in audit workpapers.
Strong attention to detail, analytical skills, and ability to manage multiple priorities and deadlines.
Effective written and verbal communication skills for communicating issues, risks, and recommendations to stakeholders.

Nice To Haves

Professional certification such as Certified Information Systems Auditor (CISA) or progress toward CISA is highly beneficial.
Experience working with access control frameworks and tools to support user provisioning, authentication, and authorization processes.
Experience with change management processes and controls in IT environments.
Experience in client interaction and collaboration with external auditors on SOX compliance and IT audit matters.
Familiarity with incident and problem management, job scheduling, and interface controls in technology environments.
Exposure to business continuity and disaster recovery planning and testing.
Ability to work effectively in a dynamic environment that is evolving and presents new challenges.
Comfort operating within a culture that values trust, open communication, and the opportunity to voice opinions.
Interest in long-term engagement with potential for contract extension and conversion to a permanent role.

Responsibilities

Perform assigned SOX IT audit procedures in accordance with the audit plan and documented methodology, including walkthroughs, tests of design, and operating effectiveness testing of IT General Controls (ITGCs), IT Application Controls (ITACs), Information Used in a Control (IUC), and Information Produced by the Entity (IPE).
Assess IT General Controls such as access and security administration, change management, computer operations, backup and recovery, and related infrastructure controls to ensure they support reliable financial reporting.
Evaluate IT Application Controls and automated controls supporting key financial and operational processes for appropriate design and effective operation.
Review IUC and IPE for completeness and accuracy, and confirm that information used in controls and produced by systems meets audit and compliance requirements.
Support audit coverage of cybersecurity, business continuity, disaster recovery, interfaces, job scheduling, and incident and problem management, as needed.
Contribute to risk-based audits and advisory projects related to technology-enabled business processes, system implementations, and system migrations.
Prepare complete, accurate, and well-organized audit workpapers that clearly document the procedures performed, evidence evaluated, and conclusions reached.
Evaluate audit evidence for relevance, reliability, completeness, and accuracy, and perform timely follow-up with control owners to resolve documentation or evidence gaps.
Identify potential control deficiencies, clearly document the underlying facts and associated risks, and support root cause analysis and development of practical, actionable recommendations.
Provide timely status updates on assigned testing, open items, identified issues, and risks to planned audit timelines, proactively escalating delays or roadblocks when necessary.
Support updates to audit programs and risk and control matrices when new information, system changes, or newly identified risks impact planned procedures.
Build and maintain effective working relationships with IT, Finance, business process owners, Internal Audit colleagues, and external auditors.
Manage multiple priorities and deadlines while maintaining a high standard of audit quality, accuracy, and attention to detail.
Travel occasionally as required to support audit engagements.