Senior Auditor - IT Internal Controls & Segregation of Duties

BRP•Montreal, QC

168d•Hybrid

About The Position

We are seeking a motivated Senior IT Auditor to support the testing and evaluation of IT internal controls and to play a key role in Segregation of Duties (SoD) governance across our organization. This role is critical to ensuring a strong SOX and internal control environment and partnering with business, IT, and external auditors to maintain compliance and drive continuous improvement. You will independently execute IT internal control testing, partner with IT and the business to support the SoD process, support remediation efforts, and contribute to audit readiness in a fast-paced, collaborative environment.

Requirements

Bachelor’s degree in information systems, Accounting/Finance, or related field.
5+ years of experience in IT audit, IT risk, and SOX compliance.
Knowledge of audit processes and evidence preparation.
Familiarity with SOX compliance and internal control frameworks.
Knowledge of SAP ECC and SAP S/4HANA security concepts (roles, authorizations, Fiori apps).
Integrity, respect, and transparency.
Strong desire to learn—you take a proactive approach to personal and professional development.
Team spirit—you enjoy collaborating and value collective success.
Ability to meet deadlines while proactively communicating potential obstacles or delays.

Nice To Haves

Professional certification and designation CISA and/or CPA - an asset
Hands-on experience with SAP GRC modules (Access Control: ARA and ARM) – an asset

Responsibilities

Plan and perform testing of IT internal controls in scope for SOX ITGCs as well as other IT internal controls that are key to meet the organization’s objectives.
Evaluate design and operating effectiveness of IT controls in accordance with SOX and compliance audit methodologies.
Document testing procedures, results, and conclusions clearly and accurately.
Identify control deficiencies and opportunities for improvement, assess impact, and support remediation tracking and re-testing.
Support IT projects from an internal control perspective.
Execute SoD analysis across key applications (e.g., SAP and other financial systems).
Identify conflicting access and identify adequate mitigating controls.
Collaborate and partner with IT and business stakeholders to explain control requirements and findings.
Contribute to SoD governance, documentation, and ongoing monitoring processes.
Participate in enhancements projects to SoD frameworks, tooling, and reporting.