Title: IT Audit Manager

Department: Internal Audit

Location: 6300 Steeles Ave West, Woodbridge

Total Potential Compensation: $110,000 - $145,000

Position Summary: As an experienced IT audit professional, reporting to the Chief Internal Auditor, you will work independently in executing audits. The IT Audit Manager is primarily responsible for overseeing and conducting audits of the Company’s information systems, technology infrastructure, and operations to ensure compliance with internal policies, industry standards, and value for money audits. This role requires a deep understanding of IT processes, risk management, and auditing principles. The candidate will also assist the Chief Internal Auditor in managing the audit department operations. As a member of the leadership team, the IT Audit Manager will, as needed, be involved in various corporate and inter‑departmental IT and non‑IT initiatives and projects where the candidate’s knowledge and skills will be leveraged to ensure effective governance, risk and mitigations processes.

Responsibilities

- Relationship management and advisory service Champion a customer focused culture to nurture client relationships and gain understanding of business priorities, IT operations, challenges, and plans while supporting corporate programs.
- Be a trusted source of knowledge / advise to the business and IT teams, and assist them with improving risk management, controls, and operational efficiency by sharing knowledge and skills.
- Provide risk assurance and advisory support for strategic initiatives as necessary,



including the adoption of automation, machine learning, and AI ensuring governance, risk identification and mitigation processes are effective.
- Represent the Internal Audit team in corporate initiatives as required.
- Audit Responsible for conducting IT process and regulatory compliance audits (e.G. PCI DSS, PIPEDA). This involves planning, conducting risk assessments, developing and executing audit programs to evaluate the effectiveness of IT processes and controls.
- Communicate the audit results to Senior Management verbally and through clear and concise audit reports summarizing findings, conclusions, and recommendations, and follow‑up on the implementation of recommendations.
- Work closely with other Internal Audit team members to ensure all other audit activities are progressing as planned.
- Stay current with industry trends, regulatory changes, and emerging technologies to maintain a robust IT audit function.
- Lead the Internal Audit department in developing an AI strategy and adopting AI in our audit practice as applicable.
- Risk Assessment In conjunction with the Chief Internal Auditor and other team members,



oversee the development and execution of the annual Entity Risk Assessment exercise with the Senior Management team and the Board of Directors and reporting to the Board.
- Contribute towards the IT Risk Assessment exercise and liaise with the IT department to review and improve information risk management strategies and processes.
- Assist with Disaster Recovery and Business Continuity Planning test exercises.
- Department administration In conjunction with the Chief Internal Auditor and other audit team members, develop and oversee the execution of the annual audit plan.
- Ensure the departmental policies and procedures are current.
- Provide guidance and foster a culture of continuous improvement and professional development within the audit team to increase the team’s efficiency and effectiveness.
- Drive change and leadership best practices.
- Other related duties as required or assigned.

Qualifications
- One or more of the following or related certifications required: Certified Qualified Accountant (CPA)
- Certified Internal Auditor (CIA)
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Manager (CISM)
- Certified in Risk and Information Systems Control (CRISC)
- Certified in the Governance of Enterprise IT (CGEIT)
- Certified Information Systems Security Professional (CISSP)
- Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
- Experience with the following IT Security Frameworks preferred:

📌 It Audit Manager (Vaughan)
🏢 407 ETR Concession Company
📍 Vaughan