Manager, Internal Audit

Position Overview

We are seeking a motivated and detail-oriented Manager, Internal Audit to support the execution and ongoing management of the organization’s Sarbanes-Oxley (SOX) Section 404 compliance program . Reporting to the Senior Manager, Internal Audit and Compliance, this role will be responsible for performing risk assessments, executing control testing, maintaining SOX documentation, and coordinating with internal stakeholders and external auditors.

The ideal candidate will have a strong foundation in public company auditing, ideally gained within a Big 4 public accounting firm , with working knowledge of PCAOB and COSO frameworks . The successful candidate will be comfortable managing multiple workstreams independently while contributing to the overall effectiveness and continuous improvement of the SOX program.

Key Responsibilities

- Maintain and update project milestones, deliverables, and deadlines to align with external audit timelines and quarterly and annual reporting schedules.
- Perform the annual top-down risk assessment , including identifying significant accounts, material business processes, and relevant assertions in accordance with PCAOB AS 2201 .
- Assess the SOX impact of significant business changes, including acquisitions, system implementations, organizational changes, and process transformations, and identify required scope adjustments.
- Create and maintain process narratives, flowcharts, and Risk and Control Matrices (RCMs) .
- Partner with process owners to identify, document, and update key preventive and detective controls.
- Evaluate control design and precision, identifying controls that are either too broad or overly granular and escalating issues as appropriate.
- Execute the annual SOX testing plan across interim and roll-forward periods, including determining sample sizes and applying standard testing methodologies such as inquiry, observation, inspection, and re-performance.
- Conduct process and control walkthroughs and prepare clear, complete, and well-supported audit workpapers that meet internal quality standards.
- Evaluate control exceptions, document root causes, and provide initial severity assessments for Senior Manager review.
- Analyze deficiency trends and identify potential systemic control issues.
- Work with process owners to develop remediation plans and perform follow-up testing to validate that remediated controls are operating effectively.
- Serve as a day-to-day point of contact for external auditors, facilitating walkthroughs, coordinating evidence requests,



and proactively tracking and resolving outstanding information requests.
- Develop strong cross-functional relationships with stakeholders across finance, accounting, operations, procurement, IT, and other business functions .
- Assist in delivering awareness and training sessions for control owners regarding SOX requirements, documentation expectations, control execution, and evidence-retention best practices.
- Coordinate with the IT audit and compliance team on IT General Controls (ITGCs), including access management, change management, and IT operations, as well as IT Application Controls supporting key business processes.
- Ensure business process controls that rely on technology are appropriately supported by relevant IT controls.
- Identify opportunities to improve SOX program efficiency, including control rationalization, reducing reliance on manual controls in favor of automated or system-enforced controls, and streamlining testing procedures.
- Stay informed of PCAOB inspection findings, SEC guidance, regulatory developments, and evolving industry best practices , and communicate relevant updates to the team.

Qualifications & Experience

Education

- Bachelor’s degree in Accounting, Finance, or a related field required.
- CPA (Canada) designation or equivalent professional accounting designation.
- CIA (Certified Internal Auditor) or another relevant professional certification is considered an asset.

Experience
- Minimum 4–7 years of progressive experience in external audit, internal audit, SOX compliance, or a related control environment.
- Minimum 2 years of experience within a Big 4 public accounting firm in an assurance, risk, or internal audit practice, with exposure to integrated audits of SEC-registered/public companies required.
- Hands-on experience executing SOX testing programs, including walkthroughs, control testing, workpaper preparation, and deficiency documentation.
- Experience working with and/or coordinating directly with external auditors on SOX-related matters.
- Previous experience working on the management/company side , as the organization subject to the audit rather than solely as the external auditor,



is considered an asset.
- Experience working with both business process controls and IT-dependent controls/ITGCs is preferred.

Technical Knowledge
- Working knowledge of the COSO 2013 Internal Control — Integrated Framework and its application to SOX compliance.
- Familiarity with PCAOB Auditing Standard AS 2201 and its application to management’s SOX assessment and testing approach.
- Strong understanding of IFRS and US GAAP , particularly as they relate to significant accounting and financial reporting areas.
- Understanding of the SEC framework for evaluating internal control deficiencies .
- Basic to intermediate understanding of IT General Controls (ITGCs) , including logical access/security, change management, and IT operations.
- Understanding of how ITGCs and IT Application Controls support key business process controls.
- Familiarity with SOX, ITGC, SOC 1 and SOC 2 reports and their relevance to the internal control environment is an asset.

Skills & Competencies
- Strong organizational and project management skills, with the ability to manage multiple testing workstreams, priorities, and deadlines simultaneously.
- Excellent written and verbal communication skills, with the ability to document audit findings clearly and explain control concepts to stakeholders without an audit background.
- Strong attention to detail and professional skepticism, with the ability to critically assess whether control evidence adequately demonstrates operating effectiveness.
- Strong interpersonal and relationship-building skills, with the ability to collaborate effectively with process owners, finance teams, IT, external auditors, and other stakeholders.
- Ability to work independently, exercise sound judgment, and escalate significant issues appropriately.
- Proficiency with GRC/SOX management platforms , such as AuditBoard or Workiva, is an asset.
- Solid Microsoft Excel skills; familiarity with data analytics and audit analytics tools is a plus.
- Ability to operate effectively in a fast-paced environment while maintaining high standards of accuracy, documentation, and confidentiality.

Candidates must be eligible to work in Canada I would like to thank all the candidates in advance. Please do stay connected on LinkedIn for future opportunities. Shortlisted candidates will be contacted .

This position reflects a current vacancy with one of our clients. Our Recruiters combine their expertise and AI-enabled technology in the recruitment process.

📌 Manager Internal Audit (Greater Toronto Area)
🏢 Professional Staffing
📍 Greater Toronto Area