Senior IT Internal Auditor

Company description

Be part of the journey!

Our mission is to be the preferred airline for our customers and our team.

Open-mindedness, care for others, intelligence at work and above all a good dose of fun allow us to accomplish great things every day. Our commitment has earned us the title of world's best leisure airline many times, and that's just the beginning.

Want to join us? You'll have the chance to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You'll also have the opportunity to work in modern and inspiring work environments.

Job description

Under the management of the Senior Director, Internal Audit and Integrated Risk Management, the incumbent acts as an expert in IT audit and internal controls related to information technology. They contribute to the evaluation of the internal control system for financial reporting within the framework of Regulation 52-109, while developing a risk-based operational IT internal audit coverage.

Their role includes planning and executing control tests, organizing documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and tracking control deficiencies.

The position also includes managing an IT audit program, including identifying and carrying out IT internal audit mandates.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls, and reporting controls.
• Act as a key point of contact with the external auditor for work on IT controls, including coordinating requests, evidence, and follow-ups.
• Structure and maintain IT control environment documentation, including control inventory, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical vendors and determine required follow-ups for complementary controls, exceptions, or limitations identified.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and ensure follow-up of remediation plans with relevant stakeholders.
• Plan and conduct risk-based operational IT internal audits, particularly in the areas of cybersecurity, access, changes, operations, IT vendors, technology projects, and critical applications.
• Act as a business partner to the CIO to strengthen the IT internal control environment, guide remediation of deficiencies, and sustainably integrate good control practices.
• Prepare concise communications for management on IT risks, findings, recommendations, action plans, and work progress.
• Support the internal audit team in using analytics to increase the efficiency, coverage, and value of audit work, including creating analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA strongly desired; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent certification is an asset.
• Practical knowledge of ITGCs, application controls, reporting controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical vendors.
• Knowledge of data analytics tools (e.g., Power BI), SAP knowledge an asset.
• Excellent communication, popularization, collaboration, and management skills for multiple deliverables with IT, finance, operations stakeholders, and external auditors.
• Fluency in spoken and written French and English.

*A good command of French is required for positions in Quebec. The incumbent will need to communicate frequently in English, both orally and in writing, with colleagues, clients, or other stakeholders, both in Quebec and internationally.

Additional information

Please note that the internal job title may differ from the displayed title.

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

#LI-AE1

Employment Equity

Transat is committed to fostering an inclusive and respectful environment where equity takes precedence. We strive to build a workforce that reflects the diversity of our customers and the communities in which we travel. We therefore encourage women, visible minorities, ethnic minorities, Indigenous peoples, and people with disabilities to apply. Transat will accommodate people with disabilities throughout the selection and hiring process. If you require accommodations, please contact us so that we can appropriately meet your needs together.