IT Auditor

Job Title: IT Auditor (Contract) Location: Toronto, ON (Open to Winnipeg) Contract Duration: 2 Months Job Description On behalf of our client, a premier financial services organization, we are seeking a detailed-oriented IT Auditor for a 2-month contract position. Joining the Corporate Services Internal Audit team, you will play a critical role in supporting risk-based IT audits and statutory financial audit engagements. Reporting directly to the Senior Manager, IT Audit, you will focus on assessing IT General Controls (ITGC) across key applications and infrastructure processes. This is an excellent opportunity to bring your technical assurance expertise to a highly collaborative, regulated environment. As an IT Auditor, you will apply established internal audit methodologies to evaluate risks, assess control design and operating effectiveness, perform testing, and communicate clear audit observations. You will work independently on assigned audit activities while collaborating closely with cross-functional business and technology stakeholders. In addition to ITGC testing, you will support integrated audit engagements by evaluating technology risks and controls within broader business processes to ensure quality standards and documentation requirements are consistently met. Advantages • Tier-1 Client Exposure: Gain valuable experience working with a leading wealth and asset management corporate network. • Focused Scope: Lead high-impact testing in key control areas over a defined 2-month term. • Collaborative Environment: Work alongside a highly skilled, professional internal audit team with direct exposure to senior IT management. • Location Flexibility: Primary placement in Toronto, with considerations for Winnipeg-based candidates. Responsibilities • Execute assigned IT audit and advisory engagements following professional standards and departmental procedures. • Conduct engagement-level risk assessments to identify technology, security, operational, and regulatory risks within the audit scope. • Assess the design and operating effectiveness of ITGCs, including Access Security, Change Management, IT Operations, and System Development Life Cycle (SDLC) controls. • Perform walkthroughs, stakeholder interviews, control testing, evidence reviews, and sampling procedures to support audit conclusions. • Analyze IT and business processes to identify control gaps, deficiencies, and efficiency opportunities. • Evaluate the root cause, significance, and financial reporting impact (ICFR) of identified control issues. • Prepare clear, concise, and well-supported audit workpapers, observations, and reports. • Communicate findings effectively to audit leadership and key technology stakeholders. • Assist in integrated audit engagements and participate in the follow-up and validation of management action plans. Qualifications Must-Have Qualifications: • Experience: 3 to 5+ years of hands-on experience in IT Audit, IT Risk, IT Compliance, or Internal Audit. • Technical Skills: Proven track record testing ITGCs (Access Security, Change Management, Operations, SDLC) and understanding their impact on Internal Control over Financial Reporting (ICFR). • Audit Execution: Demonstrated ability conducting risk assessments, walkthroughs, sampling, and evidence reviews, as well as drafting clear workpapers and reports. • Leadership & Soft Skills: Strong project management abilities to handle multiple priorities under tight timelines; excellent written/verbal communication and stakeholder management skills. Education & Certifications: • Education: University degree in Information Systems, Computer Science, Accounting, Business, Risk Management, Cybersecurity, or a related field (or an equivalent combination of education and experience). • Certifications (Nice-to-Have): Active professional designation or progress toward CISA, CIA, or CPA. Asset Qualifications: • Previous experience within financial services, wealth management, asset management, or a regulated industry environment. • Experience utilizing data analytics, data extraction, and sampling tools for audit testing and issue validation.