Internal IT Auditor

• Perform comprehensive audits of IT General Controls, including logical access, change management, data processing, and backup/recovery processes. Identify control gaps and provide recommendations for remediation. Participate in the creation and elaboration of the yearly internal audit plan Based on risk assessments.
• Conduct IT risk assessments to identify and evaluate key IT-related risks. Assist in developing annual audit plans based on risk exposure.
• Develop and maintain IT audit documentation, including process flows, risk-control matrices, and testing strategies. Test the design and effectiveness of ITGC controls, reporting on weaknesses and inefficiencies.
• Ensure compliance with relevant regulatory and industry standards (e.g., SOX, SOC, PCI-DSS) by evaluating IT systems and processes. Collaborate with stakeholders to align audit practices with standards.
• Assess the effectiveness of data integrity controls and access management controls to ensure that sensitive information is protected and accurately maintained.
• Work closely with IT, security, and business teams to understand control requirements, share audit findings, and ensure remediation of issues. Provide advisory support in implementing effective ITGC frameworks.
• Stay updated on best practices and emerging trends in ITGC, risk management, and auditing standards. Recommend process improvements to enhance control effectiveness and efficiency.
• Prepare and present clear, actionable audit reports and executive summaries to senior management, highlighting findings, risks, and recommended corrective actions.

• You hold a bachelor's degree in information technology, Information Systems, Finance, or a related field.
• You possess CISA, CIA, or other relevant certifications (an asset)
• You have 3 to 5 years of experience in IT auditing, ITGC, or a similar role.
• You have experience with regulatory frameworks such as SOX, SOC, and/or PCI-DSS.
• You have experience in testing ITGC controls (access and change management, operations, and data backup/recovery).
• You possess skills to use data analysis tools (Excel, SQL), SAP, S4HANA and cloud computing controls.
• You have strong understanding of business risks and analytical skills.
• You have a good understanding of IT infrastructure, networks, databases, and application controls.
• You are familiar with audit management tools and techniques.
• You have excellent analytical and problem-solving skills with keen attention to detail.
• You have good spoken and written communication skills in English and in French.
• You are able to work both independently and collaboratively in a fast-paced environment.
• You have the ability to travel when required (15% of the time).

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Bombardier