Senior IT Auditor, Assurance & Advisory

Fidelity Canada•Toronto, ON

2d•CA$150,000 - CA$170,000•Hybrid

About The Position

Fidelity Canada Internal Audit provides independent and objective assurance and advisory services to improve customer service and enhance overall organization value and business performance. This mission is accomplished through assessing the adequacy and effectiveness of controls, compliance, and risk management and governance processes, reporting on issues and solutions that improve Fidelity Canada’s control environment, promoting best practices and continuous improvements, and responding to change with a sense of urgency through continuous risk assessment and resource allocation. The role of the IT Audit Analyst is to deliver technology-focused audit assignments as part of a wider team to verify applications (including their development and support) and infrastructure are effectively controlled and that risks are mitigated. You will be required to lead and participate in the planning and execution of audit assignments in line with the audit methodology, producing findings and draft reports for presentation to Senior Management. The role will report directly to the Senior Manager of Internal Audit in Canada, whilst providing support to the Fidelity IA global audits as required. The successful candidate will play a key role to help the Senior Manager of Internal Audit in Canada to continue to grow and deepen the technology audit footprint (depth and breadth), and have the opportunity to help shape and build technology audit capabilities in Canada and across the FIL group.

Requirements

Expert knowledge and extensive experience related to technology controls and risks associated with products across asset management.
Strong knowledge of audit principles, frameworks and standards such as IIA, ISACA and NIST standards.
Outstanding oral and written communication skills and ability to communicate clearly and concise at all levels.
Strong client management, and problem-solving skill, and ability to respond effectively to changing business needs.
Ability to build strong relationships and influence senior stakeholders.
Excellent organizational skills and delivery focus with an ability to work to tight deadlines.
High energy, positive attitude and goal driven; ability to work effectively in a team while being flexible, adaptable.
5+ years related experience
University degree (BS/BA in accounting, computer science or other IT-related field) or equivalent work experience.
CISA/CISM or equivalent.
Experience in leading IT application and infrastructure related audit engagement throughout an audit cycle from planning to reporting, preferably in financial services (i.e., asset management, brokerage).
Deep experience with most common operating systems (Windows, Linux, iOS, Android) and databases (Oracle, SQL as well as cloud-based database, i.e., Snowflake).
Experience with enterprise cloud infrastructures such as Amazon Web Services, Office 365, and Azure.
Sustained hands-on technical experience working in cybersecurity and ransomware.
Strong understanding of emerging technology (AI/ML).

Nice To Haves

CISSP or Security related certifications will be a plus.
Data analytics, application programming, Agile auditing and crypto & blockchain will be a plus.

Responsibilities

Plan and execute audit scope coverage, fieldwork and testing within the given timeframe.
Document audit testing using best practices and form conclusions based on the outcome of the testing, including the identification of areas in need of improvement, and assisting Technology in the development of an action plan.
Keep Internal Audit and stakeholders management fully informed of the progress of all assignments and following-up issues to ensure that all agreed improvements have been actioned.
Work alongside business auditors to deliver ‘integrated’ audits by testing specific IT general and application controls supporting business process.
Provide advisory type of services to stakeholders by quickly developing an understanding of management requests / projects, and providing real time feedback and recommendations to assist business mitigating risks.
Draft audit reports that provide a clear description of issues identified, related business impact, and proposed action plans/control enhancement opportunities.
Engage with stakeholders for the validation and timely closure of audit findings.
Perform business unit risk assessments, evaluates business initiatives, organizational and regulatory changes, and identify any audit gaps and control weaknesses within the information technology audit universe.
Work with business stakeholders to assess, identify risks, advise and consult on a wide variety of technology related topics, including but not limited to: Cybersecurity; Cloud Computing; Data Governance and Emerging Technologies
Monitor and research on all relevant Bwise incidents and provide updates on emerging risks
Coordinates audit activities with the external auditors and the broader FIL technology audit team

Benefits

Base Salary and Discretionary Performance Bonus: A competitive annual range of $150,000 to $170,000, based on your experience and qualifications.
RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution—no employee matching required.
Flexible working arrangements - 100% remote, hybrid, and in office options
Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy.
Parental leave top-up to 100% of your salary for a period of 25 weeks.
Up to $650 for home office equipment.
Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice.
Diversity and inclusion programs, including an active network of Employee Resource Groups.
Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation.