Specialist, Compliance ITGC (Contract role)

Apotex•Toronto, ON

About The Position

The ITGC Compliance Specialist is responsible for supporting the design, implementation, testing, and continuous improvement of IT General Controls (ITGCs) in support of regulatory, audit, and risk management requirements. This role works closely with IT, Internal Audit, External Auditors, and business stakeholders to ensure IT control effectiveness across systems, applications, and infrastructure. The ideal candidate has a strong understanding of control frameworks (e.g., SOX, COSO, COBIT), IT processes, and audit methodologies, and is detail‑oriented with strong communication and documentation skills.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
Solid understanding of IT General Controls (ITGCs) and audit concepts.
Experience supporting SOX, SOC, or other regulatory compliance initiatives.
Strong analytical, organizational, and documentation skills.
Familiarity with control frameworks such as COSO, COBIT, ITIL, or NIST.
Experience with GRC tools (e.g., ServiceNow GRC, Archer, AuditBoard).
Knowledge of cloud environments (e.g., Azure, AWS) and related control considerations.
Attention to detail and strong problem‑solving skills
Ability to manage multiple priorities and deadlines
Strong written and verbal communication skills
Ability to work independently and collaboratively
Professional judgment and discretion when handling sensitive information
2–5 years of experience in IT compliance, IT audit, risk management, or a related role.

Responsibilities

Support the design, documentation, and maintenance of ITGCs across: Access Management, Change Management, IT Operations, Backup and Recovery.
Perform control testing for ITGCs to support SOX, SOC 1, SOC 2, or internal audits.
Identify control deficiencies, assess risk ratings, and assist with remediation plans.
Track remediation progress and validate corrective actions.
Act as a primary liaison between IT teams, Internal Audit, and External Auditors.
Prepare audit evidence, walkthroughs, and control narratives.
Support periodic risk assessments related to IT systems and processes.
Maintain audit-ready documentation, including policies, procedures, and control matrices.
Recommend enhancements to IT controls, processes, and documentation to improve effectiveness and efficiency.
Assist with the development, review, and maintenance of IT policies and standards.
Monitor compliance with internal policies and regulatory requirements.
Partner with application owners, infrastructure teams, and security teams to ensure controls are appropriately designed and operating effectively.
Provide guidance and education to IT stakeholders on compliance and control requirements.
Works in a safe manner collaborating as a team member to achieve all outcomes.
Demonstrate Behaviours that exhibit our organizational Values: Integrity, Courage, Teamwork, and Innovation.
Ensure personal adherence with all compliance programs including the Global Business Ethics and Compliance Program, Global Quality policies and procedures, Safety and Environment policies, and HR policies.
All other relevant duties as assigned.