IT Auditor

2 weeks ago


Canada Synechron Full time

Synechron is a leading global digital transformation consulting firm focused on financial services and technology organizations. Our specialties include end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering. Our 13 FinLabs serve as hubs where we innovate and develop cutting-edge business solutions. The Cybersecurity and IT Control Testing professional will lead comprehensive reviews aligned with the Annual Control Plan, focusing on IT, Infosec, and Cyber risks within the financial services sector. This role involves executing control audits, analyzing system and process controls, and communicating findings to ensure compliance and strengthen cybersecurity defenses. Responsibilities: Conduct walkthroughs of business processes and controls to understand risk exposure and control operation. Plan and execute technology and compliance control audits, including testing application system controls and assessing underlying system architecture for security, availability, and performance. Analyze technology and business processes to evaluate the effectiveness of technology controls and adherence to regulatory requirements. Identify issues through testing and collaborate with stakeholders to develop and track remediation action plans. Document audit procedures, findings, and prepare formal reports for management and regulatory review. Validate completion of agreed-upon corrective actions and monitor ongoing risk and control assessments. Engage regularly with Compliance, Risk, and Business units to provide insights and feedback on control effectiveness. Assist in developing the annual risk-based Testing Plan, applying industry standards and best practices. Requirements: Extensive experience with IT and cybersecurity controls auditing, including application controls, system architecture, and infrastructure security. Strong understanding of cybersecurity domains such as identity and access management, data protection, encryption, firewall security, and threat detection systems. Proficiency in data analysis and scripting tools, including Python, VBA, T-SQL, and data visualization platforms like PowerBI and Microstrategy. Solid knowledge of regulatory frameworks like NIST, FFIEC, ISO, GDPR, NYSDFS, and FISMA. Ability to communicate complex technical findings clearly in both written and oral formats, with exceptional attention to detail. Relevant certifications such as CISA, CISSP, CIA, or CPA are advantageous. Strong organizational skills, ability to handle multiple priorities, and collaborate across diverse teams in a global environment. Technical Skills: Experience with controls testing in cloud-based infrastructure (preferred). Advanced data analysis and visualization skills to interpret large datasets and support audit findings. Familiarity with regulatory standards and financial industry-specific risks and regulations. We offer: A multinational organization with 58 offices in 21 countries and the possibility to work abroad. 15 days (3 weeks) of paid annual leave plus an additional 10 days of personal leave (floating days and sick days). A comprehensive insurance plan including medical, dental, vision, life insurance, and long-term disability. Flexible hybrid policy. RRSP with employer’s contribution up to 4%. SYNECHRON’S DIVERSITY & INCLUSION STATEMENT Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more. All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. Referrals increase your chances of interviewing at Synechron by 2x Get notified about new Information Technology Auditor jobs in Greater Montreal Metropolitan Area. Seniority level Mid-Senior level Employment type Full-time Job function Information Technology Industries Technology, Information and Internet #J-18808-Ljbffr