IT Internal Audit Assistant Manager leading independent reviews of IT projects and programs. Enhancing IT security and governance risk/control environment across North America with global team support.
Responsibilities
Lead independent reviews of IT projects and programs and be responsible for supporting planning and execution of risk-based, process focused IT audit and advisory assignments.
Improve the overall IT security and governance risk/control environment for key IT projects/programs developed.
Operate primarily across North America with support to UK and European operations.
Provide real-time guidance on cybersecurity, AI implementation, secure development practices, cloud infrastructure, and data governance.
Identify gaps in Software Development Lifecycle practices across critical projects and collaborate with stakeholders to craft recommendations that align with both internal standards and industry best practices.
Prepare concise, executive-ready memorandums that distill complex technical risks into clear business language.
Requirements
Post Secondary education in Information Systems, Computer Science, Software Engineering, or a related field - is required.
A minimum of 3 years in IT auditing - is required.
Recognized professional audit or security related designation (CIA, CISA, AAIA, CCSK, CCSP, CISSP, CISM, etc.).
Working experience in reviewing software engineering controls related to project governance, data governance, IT and Data Security, testing and change/release management areas.
Knowledge of best practices and strong security controls over cloud environments (AWS, Azure, GCP, etc.) or Artificial Intelligence (AI)/Machine Learning (ML) technologies and their security implication.
Proficient in reviewing security vulnerabilities identified from different platforms such as middleware/container/automated pipelines with experience to independent assess the end-risk and root cause for each of the vulnerabilities.
Knowledge of cyber security risks, assessments, reports and frameworks such as those published by leading organizations (e.g. NIST, ISO 27001, SOC 2 Type II, etc.) is an asset.
Strong analytical skills that lead to accurate conclusions.
Strong project management skills and solutions driven.
Excellent written and communication skills.
Experience using data analytics tools is an asset.
Prior Big 4 firm and insurance industry experience is an asset.
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Job title
IT Internal Audit Assistant Manager – Project Security
Product Specialist BDE responsible for advising on Networks and Cybersecurity at Datacom. Supporting development of product strategies and sales ideas to drive customer success.
Security Guard at Commissionaires Nova Scotia ensuring safety, security, and protection for clients. Engaging veteran personnel in critical roles across various environment.
Fachkraft für Schutz und Sicherheit supporting public and private safety while protecting individuals and assets. Engage in preventing conflicts and recognizing dangers across various settings.
Senior Software Engineer at eBay developing cloud - native security services and mentoring teams. Focused on high availability and secure coding practices with a scalable infrastructure.
Project manager for IT infrastructure within IT security projects at DATAGROUP. Engaging in project management and communication with technical teams and clients.
Senior SAP Security Consultant designing future SAP security solutions for clients. Engaging with technological challenges and supporting digital transformation efforts.
Cybersecurity Engineer managing identity and access controls for enterprise applications at Truist. Expertise in Microsoft Entra and troubleshooting access issues in complex environments.
Cybersecurity Compliance Consultant performing SOX IT compliance testing at Truist. Assessing corporate cybersecurity compliance and managing risk and compliance functions across various locations.
IT Security Consultant conducting technical audits and consulting on cybersecurity for various sectors. Developing tailored security strategies and ensuring compliance with regulations.
Senior Consultant in IT Security conducting audits and creating security strategies. Advising clients in cybersecurity and ensuring compliance with regulations.