Principal IT Internal Auditor

Company Description

Be part of the journey!

Our mission is to be our customers' and team's favorite airline.

Open-mindedness, care for others, intelligence at work and above all a healthy dose of fun allow us to accomplish great things every day. Our commitment has earned us the title of world's best leisure airline on multiple occasions, and this is only the beginning.

Want to join us? You will have the chance to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You will also have the opportunity to work in modern and inspiring work environments.

Job Description

Reporting to the Senior Director, Internal Audit and Enterprise Risk Management, the incumbent acts as an IT audit and IT internal controls expert. They contribute to the evaluation of the internal control system regarding financial information under Regulation 52-109, while developing a risk-based IT operational internal audit coverage.

Their role includes planning and executing control tests, organizing the documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and following up on control deficiencies.

The position also includes managing an IT audit program, including identifying and conducting internal IT audit mandates.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls, and report controls.
• Act as a key contact point with the external auditor for work related to IT controls, including the coordination of requests, evidence, and follow-ups.
• Structure and maintain the documentation of the IT control environment, including the inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers and determine the required follow-ups for complementary controls, exceptions, or identified limitations.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and ensure follow-up on remediation plans with relevant stakeholders.
• Plan and perform risk-based operational IT internal audits, notably in the areas of cybersecurity, access, changes, operations, IT suppliers, technological projects, and critical applications.
• Act as a business partner to the DSI to strengthen the internal IT control environment, guide the remediation of deficiencies, and sustainably integrate good control practices.
• Prepare concise communications for management regarding risks, findings, recommendations, action plans, and the progress of IT work.
• Support the internal audit team in using analytics to increase efficiency, coverage, and the value of audit work, including the creation of analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent certification is an asset.
• Practical knowledge of ITGCs, application controls, report controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers.
• Knowledge of data analytics tools (e.g. Power BI), knowledge of SAP an asset.
• Excellent communication, popularization, collaboration, and multi-deliverable management skills with IT, finance, operations stakeholders, and external auditors.
• Oral and written mastery of French and English *

*A good command of French is required for positions in Quebec. The incumbent will need to communicate frequently in English, both orally and in writing, with colleagues, clients, or other stakeholders, both in Quebec and internationally.

Additional Information

Please note that the internal job title may differ from the posting title.

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

Employment Equity

Transat is committed to fostering an inclusive and respectful environment where equity takes precedence. We strive to build a workforce that reflects the diversity of our customers as well as the communities we travel to. We therefore encourage women, visible minorities, ethnic minorities, Indigenous peoples, and persons with disabilities to apply. Transat will accommodate persons with disabilities throughout the selection and hiring process. If you need accommodation measures, please contact us so that we can work together to meet your needs appropriately.