Information Technology Auditor

Job Title: IT Auditor

Location: Contrecoeur, QC (Hybrid 4x/week)

Job Type: Permanent

Must be perfectly bilingual French and English

Job Description:

The IT Auditor will support various audit assignments, such as IT audits, operational audits and cybersecurity reviews, including inquiries and interviews with company personnel, using the guidelines established to analyze the adequacy of internal controls and compliance with company standards, policies and procedures.

Scope:

· Execute IT audit projects created to provide an accurate assessment of operational performance and internal control processes

· Actively participate in and lead operational audit engagements, including all aspects of audit objective setting, planning, and fieldwork and reporting applying defined methodology

· Produce and review reports and audit working papers, ensuring that review findings are effectively documented, as well as recommended actions that management should take, for easy follow-up;

· Add value by identifying risks and improving the control structure.

· Maintain and display the highest standards of ethics, professionalism, integrity and discipline in all actions

Responsibilities:

· Analyze and evaluate ITGC controls and IT internal controls around all existing systems; identify and assess potential IT risks and related issues by applying knowledge of IT industry trends and the AM IT environment

· Test the effectiveness of the ITGC

· Perform required IT audits of the organization working as a team, in accordance with standards established by the department and standards for the professional practice of internal auditing established by the IIA

· Preparation of audit documentation and reports

· Carry out an estimate of the skills and time needed to carry out audit projects; discover potential audit areas; and provide assistance in determining the level of inherent risk

· Ensure that audit projects are carried out within defined deadlines and in accordance with defined quality requirements;

· Participate in the preparation of reports/presentations and communicate review results to management along with recommendations for process improvements.

· Carry out quarterly follow-up on outstanding management measures from previous projects and ensure that corrective measures are implemented in a timely manner; And

· Ensure the overall quality and consistency of audit work, and compliance with departmental and professional standards for audits

· Identify weaknesses in an application, database, operating system, network, infrastructure or IT processes

· Assist in the development of a formal data analysis process

· Maintain knowledge of general business and economic developments and gain an understanding of the Company's industry.

· Maintain adequate and current technical knowledge in areas such as IT general controls, accounting, business process controls, information technology, cybersecurity and other areas as required.

· Identify opportunities to increase operational efficiencies and strengthen business process controls.

· Act as interface with external auditors as needed to provide information and documentation to support audit and management testing activities.

· Coordinate with the Business Process Control team in the execution of compliance activities to ensure alignment with company methodology.

Qualifications:

· Bachelor's degree in information systems or degree in accounting/finance with a specialization in information systems

· CIA/CISA qualifications are preferred

· 3 years of experience in IT audit, IT security, and information risk management, IT governance or other IT compliance related work, whether in public accounting, internal audit or industry. Experience in cybersecurity auditing is an added advantage.

· Previous responsibilities in some of the areas below:

· Cybersecurity experience and knowledge

· Cybersecurity Operations Management

· Experience in information technology (Infrastructure, Application, Office 365)

· Experience and general knowledge in project management.

· Good experience in cybersecurity

· Good understanding of relevant regulations and industry standards (e.g., SOX, COSO, COBIT, ITIL, NIST) and best practices and methodologies to meet these requirements

· Ability to apply these requirements to the organization's internal control frameworks

· Strong written and oral communication skills (in French and English)

· Strong time management and organizational skills

Skills:

· Ability to be flexible and work analytically in a problem-solving environment

· Attention to detail

· Strong analytical skills and thought processes

· Adaptability to changing environments, flexibility, sense of compromise, sense of service

· Business value, cost and service oriented

· Stakeholder-oriented, results-oriented

· Team spirit, learning and people development

· Strong interpersonal skills. Motivation and perseverance

· Maturity and credibility, to interact and convince the main IT players

· Ability to translate technical issues into business decisions understandable to management

· Demonstrated ability to work effectively with highly confidential information

· Travel to mines required depending on audit missions

· Excellent people skills and communication skills

· Ability to multitask