General Description

 This role conducts independent tests of systems, applications, and general technology-related processes based on a standard IT and Cyber Risk and Control framework to validate whether appropriate controls that promote safeguarding assets, data accuracy, operational efficiency, and compliance with applicable regulations and tech and cyber industry standards are in place.
 
 

Essential Duties and Responsibilities

• Performs interviews and walkthroughs of cyber and technology processes and controls to understand the process around systems or applications subject to validation tests.
• Analyzes data gathered to evaluate the design effectiveness of controls established by Management and develops a program to test operating effectiveness as applicable. 
• In coordination with the Manager, prepares, discusses, and submits possible observations and recommendations to enhance the internal control environment.

Education

Experience

•  At least 3-5 years of experience in internal or external auditing of information technology, cybersecurity, IT risk management, or general hands-on IT experience (networking, programming, infrastructure, database), preferably supporting financial institutions.
•  CISA or related certification a plus.

Other Qualifications

• Comprehensive understanding of internal control environments within the IT function. Understanding information security standards, best practices for securing computer systems, and applicable laws and regulations.
•  Knowledge of internal auditing, controls, risk management, and finance and accounting practices and methods.
•  Experience with multiple technology domains, including aspects of Windows / Office 365, web and/or database management, software development, networking, and automation.
•  Excellent written and verbal communication skills.  Excellent documentation skills is a must.
•  Working knowledge of MS Office: Word, Excel, PowerPoint, ACL or Arbutus, and Database Querying (SQL).
•  Excellent people skills to develop and maintain good relationships with stakeholders. Ability to work under pressure to meet deadlines.
•  Excellent organizational skills to work with multiple things and comply with established deadlines.
•  Excellent leadership and teamwork skills.
   

Values