
Manager - IT Internal audit
- Toronto, ON
- 74.000-156.000 $ par an
- Permanent
- Temps-plein
Work Model: Hybrid
Reference code: 129777
Primary Location: Toronto, ON
All Available Locations: Toronto, ONOur PurposeAt Deloitte, our Purpose is to make an impact that matters. We exist to inspire and help our people, organizations, communities, and countries to thrive by building a better future. Our work underpins a prosperous society where people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and functioning social and economic institutions, and allows our friends, families, and communities to enjoy the quality of life that comes with a sustainable future. And as the largest 100% Canadian-owned and operated professional services firm in our country, we are proud to work alongside our clients to make a positive impact for all Canadians.By living our Purpose, we will make an impact that matters.
- Have many careers in one Firm.
- Enjoy flexible, proactive, and practical benefits that foster a culture of well-being and connectedness.
- Learn from deep subject matter experts through mentoring and on the job coaching
- Lead and deliver IT internal audit projects for clients covering core, emerging and advanced IT risk areas including IT Risk Assessments as well as IT Governance, Cloud, Cyber, System Implementation and IT Operational audits.
- Support business-oriented audits to provide IT-related insights and test relevant controls and processes.
- Perform IT Risk assessments and support clients in preparing their annual IT Internal audit plan.
- Lead and manager Information Technology General Control (ITGC) testing engagements as part of NI52-109 or SOX certification programs.
- Play an active role in business development activities such as networking and preparation of client proposal documents in collaboration with Cyber and Internal Audit professionals.
- Monitor and assess compliance with internal policies, SOX requirements (if applicable), and relevant regulatory standards (e.g., NIST, ISO 27001, COBIT).
- Communicate findings and recommendations to senior management and stakeholders.
- Collaborate with IT leadership to understand strategic initiatives, identify risks, and offer proactive recommendations.
- Stay current on technology, cybersecurity, regulatory requirements, and audit practices.
- Support continuous improvement of internal audit methodologies and tools and ensure the respect of the firm quality assurance requirements for all projects.
- Foster a culture of continuous improvement and knowledge sharing within the audit team.
- Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field (Master’s preferred).
- 6+ years of combined experience in IT auditing, risk management, information security, system implementation and ISO 27001 reviews and readiness assessments.
- 2+ years in a supervisory or management role.
- Professional designation or willingness to obtain one is preferred (e.g., CISA, CISSP, CISM, CIA)
- Experience in developing, implementing and supporting Cyber Programs, such as vulnerability management, threat detection, incident response and disaster recovery and application security.
- Advanced knowledge in advanced and emerging IT risk areas: Security and risk management, asset security, security architecture, communication and network security, identity and access management, security assessment and testing, security operations, software development security, and cloud security.
- Advanced knowledge and direct experience with technology frameworks/standards such as ITSG-33, NIST CSF, ISO 27001, ITIL, COBIT, SOC2, PCI, GDPR etc.
- Excellent interpersonal relations and demonstrated ability to effectively work with others in teams
- Ability to manage multiple priorities and work effectively in a fast-paced environment
- A Big 4 or other consulting firm experience is an asset