Principal Internal Auditor IT

Company Description Join the Journey!

Our mission is to be the preferred airline for our customers and our team.

Openness of mind, concern for others, intelligence at work, and above all, a good dose of fun allow us to accomplish great things every day. Our commitment has earned us the title of the world's best leisure airline multiple times, and this is just the beginning.

Do you want to join us? You will have the opportunity to enjoy exclusive travel privileges to explore the world and create unforgettable memories. You will also work in modern and inspiring work environments.

Under the management of the Chief Internal Audit and Integrated Risk Management Director, the person holding this position acts as an expert in IT audit and internal controls related to information technology. They contribute to the evaluation of the internal control system regarding financial information within the framework of Regulation 52-109, while developing an operational IT internal audit coverage focused on risks.

Their role includes planning and executing control tests, organizing the documentation of the IT control environment, coordinating with the external auditor, as well as identifying, evaluating, and following up on control deficiencies.

The position also includes managing an IT audit program, including identifying and performing internal IT audit assignments.

Responsibilities

• Plan, execute, and document IT audit work related to the 52-109 / CIIF program, including general IT controls, application controls, and report controls.
• Act as the key contact point for the external auditor for IT control work, including coordinating requests, evidence, and follow-ups.
• Structure and maintain the documentation of the IT control environment, including the inventory of controls, systems, applications, interfaces, critical reports, and control owners.
• Analyze SOC 1, SOC 2, ISAE 3402, or other critical vendor assurance reports and determine the follow-ups required for additional controls, exceptions, or limitations identified.
• Identify, qualify, and document IT control deficiencies, formulate practical recommendations, and ensure the follow-up of remediation plans with stakeholders.
• Plan and perform operational IT internal audits based on risks, particularly in the areas of cybersecurity, access, changes, operations, IT suppliers, technology projects, and critical applications.
• Act as a business partner with the CIO to strengthen the IT internal control environment, guide the remediation of deficiencies, and integrate best practices in control.
• Prepare concise communications for management on risks, findings, recommendations, action plans, and the progress of IT work.
• Support the internal audit team in using analytics to increase the efficiency, coverage, and value of audit work, including creating analysis routines using Power BI and other relevant tools.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, business administration, audit, risk management, or a related field.
• 5 to 8 years of relevant experience in IT audit, internal controls, CGTI, application controls, cybersecurity, or IT risk management.
• CISA strongly desired; CPA, CIA, CRMA, CRISC, CISSP, CISM, or equivalent certification is an asset.
• Practical knowledge of CGTI, application controls, report controls, and audit test methodologies.
• Ability to analyze SOC 1, SOC 2, ISAE 3402, or other critical vendor assurance reports.
• Knowledge of data analytics tools (e.g., Power BI), knowledge of SAP is an asset.
• Excellent communication, presentation, collaboration, and multi-tasking skills with IT, finance, operations, and external auditors.
• Proficiency in both French and English, both spoken and written.
• *A good command of French is required for positions in Quebec. The person in the role will need to frequently communicate in English, both orally and in writing, with colleagues, clients, or other stakeholders, both in Quebec and internationally.*

Additional Information Please note that the internal job title may differ from the job posting title.

*Artificial intelligence tools are used to analyze applications, whether to sort or preselect profiles based on criteria related to job requirements. All applications are then reviewed by our recruitment team to ensure a fair and inclusive process.* *Les outils d’intelligence artificielle sont utilisés pour analyser les candidatures, que ce soit pour trier ou présélectionner les profils en fonction de critères liés aux exigences du poste. Toutes les candidatures sont ensuite examinées par notre équipe de recrutement afin d’assurer un processus équitable et inclusif.* #LI-AE1

Employment Equity

Transat is committed to fostering an inclusive and respectful work environment where equity is paramount. We strive to assemble a workforce that reflects the diversity of our customers and the communities in which we travel. We encourage women, visible minorities, ethnic minorities, Indigenous peoples, and people with disabilities to apply. Transat will accommodate people with disabilities throughout the selection and hiring process. If you require accommodations, please let us know so we can work together to meet your needs appropriately.