Senior IT Audit Analyst

Location: Toronto, Ontario, On-site, 5 days per week

Language: English, strong written and verbal communication

Background Check Requirement: Reference, education, credit, criminal record, and social media checks required

About the Opportunity

Join a fast-paced technology risk and compliance team within a large, complex organization with a broad technology environment and global exposure. As a Senior Analyst, you’ll spend most of your time supporting internal IT audit activities while also reviewing a high volume of third-party SOC reports and helping stakeholders navigate technology risks.

This is a hands-on opportunity for someone who understands IT controls beyond traditional ITGC testing and can confidently assess areas such as cybersecurity, identity and access, disaster recovery, cloud governance, and vulnerability management. You’ll work with experienced leaders and challenging stakeholders, building a deep understanding of a complex environment while providing practical advice that helps strengthen risk management.

What’s In It for You

You’ll receive exposure to a diverse technology environment spanning AWS, Azure, CyberArk, SaaS applications, and global jurisdictions. The role offers $80,000 to $100,000 CAD base salary, benefits from day one, 15–20 vacation days, a 6% employer RRSP contribution, and an annual performance-based bonus of up to 15%. There is also potential for future progression into management as your knowledge and impact grow.

Your Responsibilities

• You’ll lead internal IT audit activities, assessing IT controls and identifying practical opportunities to strengthen the control environment.
• Regularly review vendor-issued SOC 1 and SOC 2 reports, supporting a high-volume SaaS environment with hundreds of reports annually.
• Assess controls across ITGC, cybersecurity, identity, disaster recovery, vulnerability management, and cloud governance.
• Support SOX, SWIFT, NIST, and ISO-related compliance activities and risk assessments.
• Advise stakeholders on risks, control deficiencies, remediation, and opportunities to improve processes.
• Navigate complex stakeholder relationships and manage multiple priorities in a fast-moving environment.

Skills and Qualifications

• 4+ years of progressive IT audit experience,
• Previous Big 4 or similar consulting experience preferred.
• Practical ITGC and broader IT controls experience across cybersecurity, identity, disaster recovery, cloud, and vulnerability management.
• Experience reviewing vendor SOC reports and assessing third-party technology risks.
• Familiarity with SOX, SWIFT, NIST, and ISO frameworks, plus AWS and Azure cloud governance concepts.
• Strong analytical, advisory, communication, and stakeholder management skills, with the ability to work through challenging situations.
• CISA designation is preferred, with experience in financial services or insurance considered an asset.