Job Title: IT Auditor

Estimated Duration: 2 Months
 

Role Overview

The IT Auditor (Contract) is an integral part of the Internal Audit team and reports to the Senior Manager, IT Audit. The successful candidate will support the delivery of risk-based IT audit and statutory financial audit support engagements across internal applications and infrastructure processes, with a focus on testing IT General Controls (ITGC). The role also supports integrated audit engagements by assessing technology risks and controls within business processes.

The successful candidate will apply Internal Audit methodology to assess risks, evaluate controls, perform audit testing, and communicate audit observations. The role requires strong analytical, communication, and organizational skills, and the ability to independently manage assigned audit activities while collaborating effectively with stakeholders and adhering to Internal Audit methodology, quality standards, documentation requirements, and reporting expectations.

Key Responsibilities

• Execute assigned IT audit and advisory engagements in accordance with Internal Audit methodology, professional standards, and departmental procedures.
• Perform engagement-level risk assessments to identify technology, security, operational, and regulatory risks relevant to the audit scope.
• Assess the design and operating effectiveness of IT General Controls (ITGCs), including Access Security, Change Management, IT Operations, and Program Development / System Development Life Cycle controls.
• Conduct walkthroughs, interviews, control testing, evidence reviews, and sampling procedures to support audit conclusions.
• Analyze technology and business processes to identify control gaps and opportunities to increase control efficiency.
• Assess audit evidence and evaluate the significance, impact, and root cause of identified issues.
• Prepare clear, concise, and well-supported audit workpapers, observations, and reports in accordance with Internal Audit methodology and documentation standards.
• Communicate audit results and observations to audit management and business and technology stakeholders.
• Support integrated audit engagements by evaluating technology risks and controls within broader business processes.
• Participate in the validation and follow-up of management action plans and remediation activities.
• Develop and maintain effective working relationships with business and technology stakeholders throughout audit engagements.

Qualifications and Experience

Must Have Requirements

Technical expertise

• 3 to 5+ years of experience in IT Audit, IT Risk, IT Compliance, Internal Audit, or a related assurance function.
• Hands-on experience executing audits over IT General Controls (ITGCs), including Access Security, Change Management, IT Operations, and Program Development / System Development Life Cycle controls.
• Experience evaluating the design and operating effectiveness of technology controls and identifying control deficiencies.
• Experience conducting risk assessments, walkthroughs, interviews, control testing, evidence reviews, and sampling procedures.
• Ability to assess technology and business processes and identify risks, control gaps, and control deficiencies.
• Understanding of how IT general controls impact achievement of internal control over financial reporting (ICFR), including assessing impact of any control deficiencies on systems supporting financial reporting.
• Experience preparing audit workpapers, observations, and reports in accordance with established audit methodologies and professional standards.

Leadership

• Ability to manage multiple audit activities while meeting established timelines and quality standards.
• Demonstrated ability to exercise sound professional judgment when evaluating risks, controls, and audit evidence.
• Strong organizational and audit project management skills.
• Ability to build and maintain effective working relationships with business and technology stakeholders.
• Effective verbal and written communication skills, including the ability to communicate audit observations clearly and concisely.
• Ability to collaborate effectively with audit team members and stakeholders in a professional and constructive manner.
• Demonstrated initiative, adaptability, and commitment to continuous learning.

Education and Certifications

• University degree in Information Systems, Computer Science, Accounting, Business, Risk Management, Cybersecurity, or a related discipline.
• An equivalent combination of education and relevant work experience may be considered.

Nice to Have

• Professional certifications such as CISA, CIA, CPA, or equivalent certifications.
• Candidates actively pursuing a relevant professional designation.
• Financial services, asset management, wealth management, or regulated industry experience.
• Experience using data analytics, data extraction, and sampling techniques to support risk assessment, audit testing, and issue validation.

Position Type

Contract

Expected Duration

2 months