We are seeking qualified IT Audit professionals at the Junior, Intermediate, and Senior levels to join a roster of resources available to support future IT audit, IT General Controls (ITGC), risk assessment, and controls review engagements on an as-and-when-requested basis.

Successful candidates may be assigned to projects involving the planning, execution, documentation, analysis, and reporting of IT audit and controls assessment activities. Assignments may vary in scope and complexity depending on project requirements and the experience level of the resource.

Key Responsibilities

Depending on level of experience and project assignment, responsibilities may include:

- Participating in the planning, execution, and reporting of IT audit and assessment engagements.
- Developing and executing audit programs, testing strategies, methodologies, and detailed testing procedures.
- Conducting risk-based assessments of information technology environments, systems, processes, and controls.
- Performing and documenting testing of IT General Controls (ITGCs), including:
- User access management and security controls;
- Change management and system development controls;
- IT operations and related controls;
- Application controls, including input, processing, output, and segregation of duties.
- Conducting interviews, walkthroughs, workshops, and evidence reviews with business and technical stakeholders.
- Evaluating the design and operating effectiveness of controls and documenting testing results and conclusions.
- Identifying control deficiencies, assessing associated risks, and developing recommendations for improvement.
- Preparing working papers, audit documentation, observations, findings, conclusions, and recommendations.
- Drafting, reviewing, and revising assessment reports, briefing materials, and other project deliverables.
- Presenting observations, findings,



and recommendations to project leadership and client stakeholders.
- Supporting or leading audit team activities, including task coordination, quality review, mentoring, and supervision of junior resources, as applicable.
- Contributing to the continuous improvement of audit methodologies, assessment frameworks, and quality assurance practices.

Resource Levels

Junior resources will work under the direction of senior team members and may be responsible for:

- Assisting with audit planning, fieldwork, testing, and documentation activities.
- Conducting research, evidence gathering, and preliminary analysis.
- Preparing working papers and supporting documentation.
- Assisting in the development of audit observations and draft reports.
- Participating in stakeholder meetings, interviews, and walkthroughs.

Intermediate resources are expected to work independently on assigned work streams and may be responsible for:
- Planning and executing audit testing activities.
- Conducting control assessments and documenting findings.
- Facilitating interviews and walkthroughs with stakeholders.
- Developing observations, risk assessments, and recommendations.
- Drafting sections of reports and presenting findings to project leadership.
- Providing guidance and support to junior resources.

Senior resources are expected to lead complex audit engagements and may be responsible for:
- Developing engagement strategies, work plans, methodologies, and testing approaches.




- Leading audit teams and overseeing the quality and completeness of deliverables.
- Supervising and mentoring audit staff.
- Reviewing working papers, testing results, and reports.
- Presenting findings and recommendations to senior management and executive stakeholders.
- Providing subject matter expertise in IT audit, ITGCs, information security, and risk management.

Candidates should possess a combination of the following qualifications, with specific requirements varying by resource level:

Mandatory

- Experience conducting IT audits, ITGC assessments, controls testing, risk assessments, or related assurance activities.
- Experience with audit planning, fieldwork, documentation, testing, analysis, and reporting.
- Knowledge of IT General Controls, application controls, information security controls, change management processes, and IT operational controls.
- Strong analytical, problem-solving, and communication skills.
- Ability to communicate effectively in English, both verbally and in writing.

Skilled Certifications (one or more)

- CPA, CA, CMA, or CGA
- CIA (Certified Internal Auditor)
- CGAP (Certified Government Auditing Professional)
- CISA (Certified Information Systems Auditor)
- CISM (Certified Information Security Manager)
- CISSP (Certified Information Systems Security Professional)

Preferred Experience

- Public sector audit or assurance engagements.
- Internal audit, compliance, risk management, or controls assessment experience.
- Experience with recognized frameworks and standards such as COBIT, NIST, ISO 27001, ITIL, or COSO.
- Experience leading teams, reviewing deliverables, and engaging with senior stakeholders.

Please apply to this job posting and attaching a copy of your resume. We thank you for your interest however, only selected candidates will be contacted.

📌 IT Systems Auditors (Ottawa)
🏢 ITnet
📍 Ottawa