Back to jobs
Job Description
Job Summary:
Conduct independent audits and assessments against ISO Standards; Information Security, IT Service Management, Business Continuity, and additionally Quality and Environmental Management. Evaluate client compliance, identify nonconformity, and provide recommendations for enhancing IT controls, policies, and procedures.
Key Responsibilities:
- Plan, Execute, and Lead audit activities across various industries (including Banking/Financial/Insurance services/Manufacture)
- Review client documentation, policies, and procedures
- Conduct interviews and on-site assessment
- Identify non-conformities and areas for improvement
- Document audit findings, conclusions, and recommendations in clear and concise reports.
- Follow up on the remediation of audit issues to ensure timely and appropriate actions are taken.
- Stay current with standard updates and regulatory/legislation changes
- Stay current with Cyber Security Threat and remediation technique
Required Qualifications, Knowledge & Skills:
- General business management concepts, practices and their inter-relationship.
- Technical Knowledge: Understanding of IT systems, infrastructure, and software security.
- Cyber Security Threats and remediation
- ISO Knowledge: Familiarity with ISO standards
- Be able to communicate in English required; additional languages valuable
- Own a vehicle and be able to travel to other provinces for work.
Required Experience: Minimum 3-5 years in any IT related field
Preferred Experience:
- 5-7 years total IT/compliance experience
- Experience with multiple industry/Business sectors
- Experience auditing ISO standard, IT audit, compliance, or quality assurance roles
- Background in IT service delivery or information security roles
- IT professional certification such as ISACA, ISC2, EC-Council, etc.
Technical Competencies:
- Software Development, IT infrastructure and systems knowledge
- Risk assessment and management
- Cyber Security Threats and remediation.
- Documentation review and analysis
- Documentation review and analysis
- Report writing and presentation