Senior Internal IT Auditor

Company Description

Be part of the trip!

Our mission is to be our customers' and team's favorite airline.

An open mind, care for others, intelligence at work and above all a healthy dose of fun allow us to accomplish great things every day. Our commitment has earned us the title of World's Best Leisure Airline on several occasions, and this is just the beginning.

Want to join us? You will have the opportunity to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You will also have the opportunity to work in modern and inspiring work environments.

Job Description

Reporting to the Senior Director, Internal Audit and Enterprise Risk Management, the incumbent acts as an expert in IT audit and IT-related internal controls. They contribute to the evaluation of the internal control system regarding financial information under Regulation 52-109, while developing an operational IT internal audit coverage focused on risks.

Their role includes planning and executing control tests, organizing the documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and monitoring control deficiencies.

The position also includes managing an IT audit program, including identifying and carrying out internal IT audit assignments.

Responsibilities

• Plan, execute and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls and report controls.
• Act as a key point of contact with the external auditor for work involving IT controls, including coordinating requests, evidence and follow-ups.
• Structure and maintain IT control environment documentation, including the inventory of controls, systems, applications, interfaces, critical reports and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402 or other critical supplier assurance reports and determine required follow-ups for complementary controls, exceptions or limitations identified.
• Identify, qualify and document IT control deficiencies, formulate pragmatic recommendations and follow up on remediation plans with relevant stakeholders.
• Plan and carry out risk-based operational IT internal audits, notably in the areas of cybersecurity, access, changes, operations, IT suppliers, technological projects and critical applications.
• Act as a business partner to the DSI in order to strengthen the internal IT control environment, guide the remediation of deficiencies and sustainably integrate good control practices.
• Prepare synthetic communications for management on risks, findings, recommendations, action plans and progress of IT work.
• Support the internal audit team in using analytics to increase the efficiency, coverage and value of audit work, including the creation of analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity or IT risk management.
• CISA strongly desired; CPA, CIA, CRMA, CRISC, CISSP, CISM or equivalent certification is an asset.
• Practical knowledge of ITGCs, application controls, report controls and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402 or other critical supplier assurance reports.
• Knowledge of data analytics tools (e.g. Power BI), knowledge of SAP an asset.
• Excellent communication, popularization, collaboration and multi-deliverable management skills with IT, finance, operations stakeholders and external auditors.
• Oral and written mastery of French and English *

*A good command of French is required for positions in Quebec. The incumbent will need to communicate frequently in English, orally and in writing, with colleagues, clients or other stakeholders, both in Quebec and internationally.

Additional Information

Please note that the internal job title may differ from the posting title.

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

Employment Equity

Transat is committed to fostering an inclusive and respectful environment where equity prevails. We strive to bring together a workforce that reflects the diversity of our customers as well as the communities in which we travel. We therefore encourage women, visible minorities, ethnic minorities, Aboriginal peoples and persons with disabilities to apply. Transat will accommodate persons with disabilities throughout the selection and hiring process. If you need accommodation measures, please contact us so that we can properly meet your needs together.