PROFILE:

Position Title: Senior Corporate IT Auditor
Department: Corporate Internal Audit
Report to: Audit & Compliance Manager, IT

JOB SUMMARY:

As a Senior IT Auditor, you will serve as a trusted advisor responsible for analyzing and assessing ATS’ IT landscape to ensure data, processes, and systems run accurately, efficiently, and securely to meet the organization’s objectives. You will lead and execute IT audit engagements, with a significant focus on SOX (Sarbanes-Oxley) compliance, while also supporting various operational projects using established IT auditing standards within the Corporate Internal Audit (IA).

This role involves developing, implementing, testing, and evaluating IT internal controls. You’ll be responsible for conducting IT-related audit engagements and other various operational projects using an established IT auditing standard within the Corporate Internal Audit (IA). IT audit procedures cover areas such as:

• Backup and Recovery (B&R),
• Change Management (CM),
• Cybersecurity (CYB),
• Business Continuity and Disaster Recovery (DR),
• Interface (INT),
• Job Scheduling (JBS),
• Manage Security (MS),
• Problem Incident Management (PIM),
• IT Infrastructure (INF),
• IT Application Controls (ITACs),
• Information Provided by the Entity (IPE)

QUALIFICATIONS:

• 4-6 years of IT auditing experience, including SOX audits, either through a firm (IT audit/advisory) or a publicly traded company
• Hold a bachelor’s degree in Business and Accounting, Information Technology, Computer Science, or a related field
• CISA (required) and CPA, CISSP, CIA, CRISC, CDMP, CIMP, CAMS designations are highly preferred
• Advanced knowledge of IT auditing standards and control frameworks such as IIA, COBIT, NIST, CSF, and ISO27001
• Strong experience in internal audit practices, and financial and operational process documentation
• Demonstrated ability to evaluate internal controls, lead and execute complex audits independently, analyze and solve complex problems, and conduct research
• Ability to manage multiple projects concurrently and meet tight deadlines
• Strong practical knowledge of audit methodologies, control methodologies, and risk mitigation
• Excellent communication skills with an ability to express ideas clearly, concisely, and persuasively both verbally and in writing
• Proficiency with ACL software (Audit Command Language) or other data analytics tools and ability to conduct data analysis is an asset
  

  LI-Hybri

RESPONSIBILITIES:

• Lead and perform IT General Controls (ITGC) and IT Application Controls (ITAC) testing, including those related to SOX compliance, making necessary adjustments based on new information and identified risks
• Prepare and review audit working papers in accordance with audit standards and internal audit procedures
• Conduct follow-up procedures to ensure appropriate audit evidence is obtained, validated, and used for testing controls in a timely manner
• Write clear, concise, and constructive audit findings based on facts, severity, and risks, and present these findings to senior management
• Perform root cause analysis to identify causes of control deficiencies and provide relevant and appropriate recommendations
• Provide periodic audit status, control testing results, and/ or any challenges to meet audit deadlines
• Mentor and provide guidance to junior auditors, enhancing their skills and knowledge
• Establish and maintain effective working relationships with the Clients/ Auditees
• Some travel may be required

This role involves developing, implementing, testing, and evaluating IT internal controls. You’ll be responsible for conducting IT-related audit engagements and other various operational projects using an established IT auditing standard within the Corporate Internal Audit (IA). IT audit procedures cover areas such as:

• Backup and Recovery (B&R),
• Change Management (CM),
• Cybersecurity (CYB),
• Business Continuity and Disaster Recovery (DR),
• Interface (INT),
• Job Scheduling (JBS),
• Manage Security (MS),
• Problem Incident Management (PIM),
• IT Infrastructure (INF),
• IT Application Controls (ITACs),
• Information Provided by the Entity (IPE