Senior IT Internal Auditor

Company Description

Be part of the trip!

Our mission is to be our customers' and team's favorite airline.

Open-mindedness, care for others, intelligence at work and above all a healthy dose of fun allow us to accomplish great things every day. Our commitment has earned us the title of world's best leisure airline on multiple occasions, and this is only the beginning.

Want to join us? You will have the chance to enjoy exclusive travel perks to explore the world and create unforgettable memories. You will also have the opportunity to work in modern and inspiring work environments.

Job Description

Reporting to the Senior Director, Internal Audit and Enterprise Risk Management, the incumbent acts as an expert in IT audit and internal controls related to information technology. They contribute to the evaluation of the internal control system regarding financial information under Regulation 52-109, while developing a risk-based IT operational internal audit coverage.

Their role includes planning and executing control tests, organizing the documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and monitoring control deficiencies.

The position also includes managing an IT audit program, including identifying and carrying out internal IT audit mandates.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / ICFR program, including IT general controls, application controls, and report controls.
• Act as a key point of contact with the external auditor for work related to IT controls, including the coordination of requests, evidence, and follow-ups.
• Structure and maintain the documentation of the IT control environment, including the inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers and determine the required follow-ups for complementary controls, exceptions, or limitations identified.
• Identify, qualify, and document IT control deficiencies, formulate pragmatic recommendations, and ensure follow-up on remediation plans with relevant stakeholders.
• Plan and conduct risk-based operational IT internal audits, particularly in the areas of cybersecurity, access, changes, operations, IT suppliers, technological projects, and critical applications.
• Act as a business partner to the DSI to strengthen the IT internal control environment, guide the remediation of deficiencies, and durably integrate good control practices.
• Prepare concise communications for management on risks, findings, recommendations, action plans, and the progress of IT work.
• Support the internal audit team in using analytics to increase the efficiency, coverage, and value of audit work, including creating analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, ITGC, application controls, cybersecurity, or IT risk management.
• CISA strongly preferred; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent certification is an asset.
• Practical knowledge of ITGC, application controls, report controls, and audit testing methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other assurance reports from critical suppliers.
• Knowledge of data analytics tools (e.g., Power BI), knowledge of SAP is an asset.
• Excellent communication, popularization, collaboration, and multi-deliverable management skills with IT, finance, operations, and external auditor stakeholders.
• Oral and written fluency in French and English *

*Good proficiency in French is required for positions in Quebec. The incumbent will need to communicate frequently in English, both orally and in writing, with colleagues, clients, or other stakeholders both in Quebec and internationally.

Additional Information

Please note that the internal job title may differ from the posting title.

Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.

Employment Equity

Transat is committed to fostering an inclusive and respectful environment where equity prevails. We strive to build a workforce that reflects the diversity of our customers and the communities in which we travel. We therefore encourage women, visible minorities, ethnic minorities, Indigenous peoples, and persons with disabilities to apply. Transat will accommodate persons with disabilities throughout the selection and hiring process. If you need accommodation measures, please contact us so that we can properly meet your needs together.