Senior IT Internal Auditor (Toronto, ON, CA, M5J 2V5)

Join our team

The Internal Audit team is a high performing collaborative team that supports the management of key risks across the organization.

As part of the Risk Management team within TELUS Finance, the Internal Audit team provides proactive, objective enterprise risk and internal control assessment, audit and assurance services for Management and the TELUS Board of Directors. You will join a team that supports governance and compliance at the highest corporate industry standard; enabling operational improvements, identification and mitigation of risk exposure, effective control and governance oversight. You will partner with internal stakeholders and collaborate with a wide range of Business Units across the organization.

Here’s the impact you’ll make and what we’ll accomplish together

You're a strategic thinker with the ability to identify key process control gaps and collaborate with business leaders in identifying action plans to improve processes. You will partner with senior leaders and stakeholders to identify new ways in inspiring change to better improve efficiencies. Today, you could be reviewing a key project or program and identifying improvements that impact team members across the entire organization and tomorrow, you could be assessing a pivotal initiative that involves only senior leaders. The possibilities are endless in terms of projects that come to the Internal Audit team.

Here's how

• Plan, conduct and lead internal audits which align with professional standards
• Drive and support the completion of assigned audit engagements including collaborating and communicating with management on risk mitigation action plans
• Plan and conduct follow-up reviews of management action items to mitigate risk/control exposures
• Perform peer or quality assurance reviews of engagements ensuring documentation, conduct, evidence standards are maintained by all staff on the audit
• Perform risk assessments at the enterprise, business unit and project specific levels including interviews with senior, and executive management
• Conduct specific investigations and provide management advice and assistance regarding risk mitigation and internal control practices

You're the missing piece of the puzzle

• Minimum 5 years or more of experience in providing Information Technology (IT) and security assurance and/or equivalent IT and security experience in a medium or large organization
• Professional IT, Internal Audit, and/or other professional designation like Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP)
• Sound knowledge of IIA Standards and Practice Advisories and information security principles, IT technologies, Cloud technologies, and related risks
• In-depth knowledge of compliance standards including but not limited to SOX, PCI, ISO, and NIST
• Strong business analytical skills including data analysis of large data sets and ability to quickly grasp complex business concepts
• Strong project management skills and experience with an ability to manage several priorities and consistently achieve objectives and meet timelines
• Excellent verbal and written interpersonal skills across all levels of the organization, while working in a team-based, self-managed environment and cultivate open communication across the team
• Capable of leading communications and negotiating with senior management in increasingly complex, potentially confrontational situations
• Ability to appropriately and effectively challenge the status quo to affect positive business change
• Ability to anticipate and mitigate barriers to the success of projects, can also apply major problem identification and solution skills, including core, and analytical thinking
• PC skills (Google suite) and the ability to determine and use appropriate audit tools and techniques

Great-to-haves

• Bilingualism in English & French
• Knowledge of Institute of Internal Auditors (IIA) Standards, and Practice Advisories
• Familiarity with and ability to research internal and external best practices/benchmarking
• Understand the organization's key policies, practices, and procedures well enough to assess compliance in the course of audit work
• Knowledge of and ability to apply various risk assessment/control frameworks: Committee of Sponsoring Organizations of the Treadway Commission (COSO), Control Objectives for Information & related Technologies (COBIT), Information Technology Infrastructure Library (ITIL) and Cloud Security Alliance (CSA)

Advanced knowledge of English is required, because you will, most of the time, interact in English with external parties (clients, suppliers, candidates, external partners, etc.), interact in English with internal parties (colleagues, internal partners, stakeholders, etc.), as part of this position's main responsibilities, given its national scope.