IT Internal Audit Assistant Manager leading independent reviews of IT projects and programs. Enhancing IT security and governance risk/control environment across North America with global team support.
Responsibilities
Lead independent reviews of IT projects and programs and be responsible for supporting planning and execution of risk-based, process focused IT audit and advisory assignments.
Improve the overall IT security and governance risk/control environment for key IT projects/programs developed.
Operate primarily across North America with support to UK and European operations.
Provide real-time guidance on cybersecurity, AI implementation, secure development practices, cloud infrastructure, and data governance.
Identify gaps in Software Development Lifecycle practices across critical projects and collaborate with stakeholders to craft recommendations that align with both internal standards and industry best practices.
Prepare concise, executive-ready memorandums that distill complex technical risks into clear business language.
Requirements
Post Secondary education in Information Systems, Computer Science, Software Engineering, or a related field - is required.
A minimum of 3 years in IT auditing - is required.
Recognized professional audit or security related designation (CIA, CISA, AAIA, CCSK, CCSP, CISSP, CISM, etc.).
Working experience in reviewing software engineering controls related to project governance, data governance, IT and Data Security, testing and change/release management areas.
Knowledge of best practices and strong security controls over cloud environments (AWS, Azure, GCP, etc.) or Artificial Intelligence (AI)/Machine Learning (ML) technologies and their security implication.
Proficient in reviewing security vulnerabilities identified from different platforms such as middleware/container/automated pipelines with experience to independent assess the end-risk and root cause for each of the vulnerabilities.
Knowledge of cyber security risks, assessments, reports and frameworks such as those published by leading organizations (e.g. NIST, ISO 27001, SOC 2 Type II, etc.) is an asset.
Strong analytical skills that lead to accurate conclusions.
Strong project management skills and solutions driven.
Excellent written and communication skills.
Experience using data analytics tools is an asset.
Prior Big 4 firm and insurance industry experience is an asset.
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Senior Hardware Security Engineer at Lime focusing on hardware security architecture and assessments. Collaborate with teams on product security across embedded systems and firmware.
Compliance Manager overseeing compliance processes and frameworks for Data Security Services at Entrust. Ensuring DSS products meet or exceed industry standards and mitigate compliance risks.
Product Security Engineer improving security of Lattice’s applications and services through engineering partnerships and security operations. Contributing to secure coding practices and AI/LLM security assessments.
Presales Security Expert at Fortinet developing secure platform solutions for Major Accounts. Seeking to safeguard people, devices, and data through innovative cybersecurity solutions
IT Security Specialist responsible for day - to - day support of Hudbay’s IT security program and monitoring security risks. Collaborating on various projects to ensure security best practices are followed across the organization.
Linux Engineer enhancing security technology for Canonical’s Ubuntu. Collaborating on FIPS and CC certification while implementing security frameworks and benchmarks.
Senior Security Officer managing security operations at Umicore to ensure safe and smooth business operations while leading the security staff and compliance.
Security GRC Specialist managing risk lifecycle and compliance at Aviso, a leading wealth management organization. Conducting assessments and supporting governance in a dynamic work environment.
ICRC Police and Gendarmerie Delegate focusing on dialogue with armed forces to enhance humanitarian efforts in various conflict situations. Coordination of strategies to prevent and respond to humanitarian consequences of armed conflict.