Law Society auditor examining law firm records for By - Law and conduct - rule compliance. Preparing audit reports, recommending improvements, and escalating serious regulatory breaches.
About the role
- Third-party assurance consultant assessing cybersecurity, AI, and compliance controls for BDO Canada clients. Preparing reports, recommendations, and risk assessments across SOC, ISO, and NIST frameworks.
Responsibilities
- Execute third-party assurance engagements, including SOC 1, SOC 2, ISO 27001, ISO 42001, NIST, and other security and compliance frameworks
- Evaluate IT security controls, governance frameworks, business processes, and third-party/vendor management programs
- Prepare structured reports and client deliverables aligned with engagement objectives
- Provide recommendations supporting control improvements and compliance readiness
- Coordinate timelines and information requests with engagement teams
- Develop and maintain governance policies, standards, risk registers, and control frameworks
- Conduct cyber and AI risk assessments, control-gap assessments, and security maturity reviews
- Identify AI-system risks involving data privacy, security, bias, model reliability, transparency, regulatory compliance, and third-party AI solutions
- Gather information, document findings, and resolve issues
- Communicate complex concepts to technical and non-technical audiences
- Build client relationships and identify opportunities to improve future assignments
- Adopt digital tools and automation to improve engagement efficiency and consistency
Requirements
- CPA Canada’s Chartered Professional Accountant designation required; working towards or planning to work towards it
- Working towards or planning to work towards CISA, CISSP, ISO/IEC 27001, or ISO/IEC 42001 certification considered an asset
- 0–2 years of professional experience for Auditor/Consultant or 2–5 years for Senior Auditor/Consultant in third-party assurance, risk advisory, consulting, internal audit, external audit, IT audit, or related fields
- Bachelor’s degree in Accounting, Information Systems, IT Security, Cyber Security, or related field
- Strong problem-solving, analytical, and communication skills
- Proficiency in spoken and written English required
- French fluency considered an asset
- Ability to communicate clearly with technical and non-technical stakeholders
- Foundational understanding of cybersecurity risks, controls, governance principles, and risk-management practices
Benefits
- Award-winning people-first environment
- Personal and professional growth opportunities
- Extensive learning and development opportunities
- Support for personal goals outside the office and community impact
- Collaborative, inclusive work environment
- Local and national community involvement opportunities
- Comprehensive benefits from day one
- Flexible personal time off policy
- Wellness initiative reimbursement
- Flexible blended work model across office, client site, and virtual work
- Accommodation and accessible application process support
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
CPA auditor managing certification engagements, financial statements, tax returns, and audit quality for accounting clients at Raymond Chabot Grant Thornton.
Senior Auditor identifying retail recovery claims and enhancing automated audit tools for FlexTecs, a profit - recovery firm. Partnering with technology teams and training auditors globally.
Auditor examining Toronto law firms’ records and practices for Law Society compliance. Preparing audit reports, identifying breaches, and recommending corrective improvements.
Internal Auditor assessing regulatory, financial crime and fraud risks at iA Financial Group, a Canadian insurance, savings and wealth management provider. Conducting audits, evaluating controls and investigating fraud allegations.
CM
Internal Auditor auditing ICFR and complex controls for Canaccord Genuity’s Canadian financial services operations. Coordinating external auditors and reporting recommendations to executive leadership and the Board.
EHS consulting director leading audits, risk management, and sustainability initiatives for ERM, a global sustainability consultancy. Advising clients across high - hazard industries and strengthening compliance and operational performance.
Senior Internal Auditor strengthening global controls at Twilio, a cloud communications platform. Delivering risk - based audits, SOX testing, remediation, and automation - driven insights.
Bilingual dental claims auditor reviewing healthcare claims and provider compliance for Express Scripts Canada, a Canadian health benefits manager. Conducting desk and on - site audits across Canada.
Bilingual environmental auditor supporting compliance and management - system audits for BluMetric’s water technology and engineering firm. Conducting site assessments and reporting across Canada, especially Quebec.