IT Auditor

Your daily missions

Société Générale ("SG") is a leading European bank, headquartered in France, with 120,000 employees serving over 26 million clients in more than 62 countries worldwide. For over 160 years, we have supported the development of our economies by offering our clients—businesses, institutions, and individuals—a wide range of high-value financial solutions and advisory services.

Our long-standing trust with our clients, our cutting-edge expertise, our unique ability to innovate, our ESG skills, and our top-tier brands are all integral to our DNA and serve our fundamental objective: creating lasting value for all our stakeholders.

The Group operates in three main complementary business areas, integrating ESG offerings for all its clients:

• Global Banking and Investor Solutions, a leading player offering tailored solutions to large corporations and investors, with a unique global leadership in equity derivatives, structured financing, and ESG;
• Retail Banking in France, Private Banking & Insurance, grouping SG Retail Banking, private banking activities, insurance activities, and leading online banking activities on the market;
• Mobility, International Retail Banking & Financial Services, including solidly established universal banks in the Czech Republic, Romania, and several African countries, Ayvens (the new brand from ALD | LeasePlan), a global leader in sustainable mobility, and specialized financing activities.

In America, SG is represented by subsidiaries, branches, and offices in the United States and Canada, as well as branches, subsidiaries, and offices in Brazil, Chile, Mexico, and other Latin American countries, within the Group's Banking and Investment Division (collectively, "SG Americas").

The Group's Internal Audit Department (IGAD) constitutes SG's independent internal audit function, composed of over 1,200 professionals covering all the Group's activities and services in over 150 countries. Additionally, we have a dedicated team of approximately 60 professionals covering SG Americas: SG Internal Audit Americas ("SGIAA"). This team consists of diverse profiles and subject-matter experts based in New York, São Paulo, and the newly established team in Montreal.

SGIAA conducts independent audits of operational entities objectively, rigorously, and impartially, in accordance with professional standards. Furthermore, SGIAA evaluates the compliance of Group operations, the level of risk exposure and its management, the proper application of procedures, and the effectiveness and relevance of the permanent control framework.

This position offers a unique opportunity to contribute as a high-value member of the Audit team while participating in a new phase of development with the expansion of Internal Audit's presence in Montreal, including some supervisory responsibilities.

1. ROLE AND RESPONSIBILITIES

The IT Auditor will be part of the dedicated internal audit team for information systems, cybersecurity, and data management. This position requires a high degree of autonomy and independence, with participation in all stages of the audit process, under the supervision of the mission manager.

The main responsibilities of the candidate include:

• Participate in all types of regional or global IT audit missions, whether they are specific IT function audits or integrated audits conducted jointly with business/financial auditors
• Participate autonomously in the audit process: develop a diagnostic matrix with the proposed processes and controls for validation, identify use cases for data quality testing and relevant sampling strategies, provide clear and concise debriefing presentations to IGAD management and audited entities
• Ensure that the audit management is informed in a timely manner of any significant issues arising from missions and any events that may impact the company
• Write clear and impactful audit findings and reports, adding real value to the organization
• Ensure rigorous follow-up of audit recommendations and action plans
• Contribute to the development of risk assessment, internal controls, and other necessary processes to identify risk areas or weaknesses, thus participating in the elaboration of the audit plan and strategy
• Participate in department transformation projects (data analysis, digital transformation, etc.), actively contribute to their implementation, communicate about the changes, and support other colleagues in this process.
• And if it were you?

Required Skills and Qualifications

• Bachelor's degree in computer science, information systems, information technology, or a related business discipline
• Minimum 3 years of experience in information systems, preferably in the banking/financial sector
• Knowledge of cybersecurity principles, practices, and technologies
• Knowledge in one or more IT/IS domains: governance, projects, development and SDLC, production, security, risk management, business continuity plan, technical infrastructures
• Good understanding of IT/IS processes (incident management, change management, version management, configuration management, etc.)
• Knowledge of IT security concepts, familiarity with vulnerability testing and security flaws
• Familiarity with infrastructure components, such as:
• o Database management systems (e.g., DB2, SQL Server, Oracle)
• o Major computing platforms (Windows NT/2000, UNIX)
• o Client/server architectures, web applications
• o Network components: firewalls, routers, switches, network access points (IAPs)

Assets FOR THE ROLE

• Mastery of security evaluation tools and methodologies (e.g., vulnerability scanners, penetration testing)
• Good understanding of network, application, and data protection security
• Knowledge of the investment banking or financial services sector
• Familiarity with security and control frameworks such as: ISO 17799, COBIT, COSO, Common Criteria, FFIEC
• Knowledge of regulations such as: GLBA, California Privacy Bill, Volcker Rule / Dodd Frank Act.
• Language Skills:

The ability to communicate in English, both orally and in writing, is a requirement since the person occupying this position will need to collaborate regularly with colleagues and partners located in the United States.

Due to the application of the U.S. Securities and Exchange Commission's rules to this position, candidates applying for this position will be subject to a thorough background check, including fingerprint collection by a third-party vendor selected by the Financial Industry Regulatory Authority ("FINRA")

More than a job, a launch pad OUR BENEFITS:

WHAT WE DO differently AT société générale

• Competitive compensation and benefits package, including but not limited to:
• Minimum of 20 days of vacation + 4 personal days
• + Support policy for maternity, paternity, parental, and adoption leave

+ Health and personal expense accounts (2,000 $/year) and personal expense accounts (1,000 $/year) with over 75 eligible reimbursement categories (health, education, electronics, etc.) + Fully sponsored virtual medical assistance and employee assistance program for you and your immediate family

• Various employee resource groups (ERGs) to connect with, such as Pride and Allies, American Women Network, Black Leadership Network, One planet, etc.
• A culture of continuous development by encouraging our employees to participate in various training programs (online training and coaching platform such as Coursera, GoFluent, Pluralsight, First Finance, etc.)
• Why choose us?

Société Générale is committed to offering an inclusive recruitment experience to all candidates. If you require reasonable accommodation measures during the recruitment process, please inform our recruitment team.