Senior Consultant, IT Risk, Performance and Technology

A Day in the life of a Senior Consultant

• You will primarily work with clients in Toronto and the Greater Toronto Area, with some travel as required depending on the engagement. You may also have the opportunity to work alongside colleagues from our Montreal office;
• You will demonstrate proficiency in audit concepts such as risks, controls, client relationship management, and strategic thinking;
• You will provide value-added and relevant analysis of the organization’s internal control structure;
• You will suggest meaningful and relevant recommendations on findings noted;
• You will work as a collaborative team player alongside the engagement lead and other engagement team members;
• You will interview client management and be able to identify key risks and controls where applicable;
• Assist with the management, development, and growth of the practice;
• Maintain up-to-date knowledge of related frameworks and trends.

Mandates will include, but not limited to:

• Internal/external audit mandates across a range of different business processes and IT areas
• Service Organization Controls (SOC) 1 and SOC 2 auditing and reporting
• 52-109 and SOX process optimization and compliance mandates,
• ISO 27001 and PCI audit and readiness consulting mandates
• Cloud Security auditing
• Public Key Infrastructure (PKI) assurance engagements
• Enterprise Risk Management and governance mandates
• Cybersecurity assessments
• Threat Risk Assessments
• Tabletop exercises

About you

• 3 to 5 years progressive experience in IT and business auditing, which can include internal audit, SOC, PKI assessment and audits, ISO 27001 reviews and assessments
• Knowledge of IT audit methodologies, especially those concerning general computer controls, automated controls, segregation of duties conflicts and computer security
• Proficiency and hands-on experience in creating audit plans, planning testing procedures, testing IT and business control
• Fluency in English (spoken and written)
• Accounting designation (CPA, CGA, CMA, CIA) an asset (or in the process of actively pursuing)
• IT audit and risk designation: CISA, CRISC, CISSP, or other equivalent designation (or in the process of actively pursuing) an asset
• Team spirit, with a focus on information-sharing and quality
• Ability to quickly develop good interpersonal relationships as well as persuasiveness and diplomacy
• Advanced knowledge of Microsoft Office, including PowerPoint, Excel and Word
• Ability to work independently, including the ability to develop an audit program from controls design, developing test produces to documenting and reporting on results

Must-Have Job Requirements

• SOC 1 and SOC 2 auditing and reporting
• 52-109 and SOX process optimization and compliance mandates
• IT General Controls
• Business Process Controls

What’s in it for you?

• Competitive group benefits which include group insurance, Health Spending Account, savings plans, and Employer Contribution Matching
• Employee and Family access to virtual healthcare network
• Employee and Family Assistance Programs, including consultations with mental health professionals
• Annual Health & Well-being Program
• Hybrid work Environment
• Competitive Performance Bonus
• Tuition Reimbursement
• Professional Dues Reimbursement
• Academic Incentives
• Talent referral bonus
• Client referral bonus
• Access to an on-demand concierge nannying, babysitting, and tutoring service
• Annual employee rewards and recognition