Information Technology Audit Specialist

Job description

At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the [ATB ID](https://www.atb.com/company/careers/why-atb/our-values/)). Life at ATB is about more than work. In fact, we’re consistently recognized as one of [Canada's top employers](https://www.atb.com/company/careers/why-atb/) thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members: **Impact in action:** No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities. **Thrive together:** We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs. **Ready for tomorrow:** We want to enable your success through interesting and challenging work, performance enablement, and learning and development. ## About the role This position has a **hybrid work arrangement,** which means you’ll work both remote and onsite, where time onsite is based on your job accountabilities and performance objectives. **As ATB’s next Information Technology Audit Specialist,** you will conduct ongoing audits to assess whether key information technology controls are in place to mitigate risk and safeguard the assets of ATB Financial. You will act as an advisor by making recommendations on how to improve risk management strategies and controls for audited Business Units. ## Accountabilities - Review compliance controls for technology-related regulatory, industry and contractual obligations. - Review and evaluate IT General Computing Controls, Cyber Security Controls and Application Controls. - Provide independent, objective assurance on the adequacy and effectiveness of systems, processes and controls to senior leadership and ATB’s Board of Directors. - Deliver assurance and advisory engagements, such as supporting documentation, scoping exercises, engagement letters, test sheets, working papers, audit findings, recommendations and final reports. ## Skills, experience & requirements ### **Competencies/ Skill-Sets Required** - Solid understanding of common IT Service Management, Architecture and/or Product Management processes. - Experience with designing and assessing technology-related controls (e.g. preventative, detective, corrective factors and cost benefit). - Strong understanding of IT audit principles, practices and control standards including a demonstrated ability to apply such standards. - Familiarity with relevant industry frameworks including, NIST (National Institute of Standards and Technology) frameworks, OSFI (Office of the Superintendent of Financial Institutions Canada), ICOFR (Internal Control Over Financing), ISO (International Organization for Standardization), PCI (Payment Card Industry), OWASP (Open Web Application Security Project), as well as common IT technology governance and control frameworks (e.g. Information Technology Infrastructure Library (ITIL), Control Objectives for Information and Related Technology (COBIT)). ### ### **Audit and Risk Management** - Knowledge of audit methodology, leading practices and approaches. - Strong background within professional services firms (audit, risk and advisory services). - Ability to communicate complex issues in a way that makes them easily understood. - Develop and implement audit programs and techniques to assess the effectiveness of risk management, control and governance processes. ### ### **Data and Analytics** - Data Reporting, Visualization & Dashboarding Tools - Descriptive & Diagnostic Analytics ### ### **Interpersonal Skills** - Strong demonstration of stakeholder management, proactive communication and active listening. - Strong verbal and written communication skills to effectively communicate with stakeholders at all levels, including senior management. - Work in conjunction with other Internal Assurance Focus Centres, risk management functions such as ATB’s 2nd line of defense as well as external firms to coordinate assurance efforts as required. ### ### **Accreditation** - Successful completion of a post secondary degree, a computer science, information systems or technology, graduate business, finance or management degree an asset - Professional designation such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification in Risk and Information Systems Control (CRISC), domain specific Global Information Assurance Certification (GIAC), relevant Cloud Security Alliance (CSA) certification or equivalent experience. **Don’t meet all the requirements on the list?** A resume only goes so far in expressing who you are and the unique perspectives you bring. If you believe your skills and experience align with the role—but you might not check all the boxes—we want to hear from you. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply. If you’re seeking a career where your drive, perspective and growth are celebrated, we want to hear from you. We’re dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the [Partnership Accreditation in Indigenous Relations](http://www.atb.com/company/community/indigenous-relations/?utm_source=offline&utm_medium=redirect&utm_campaign=indigenous+relations) program created by the Canadian Council for Indigenous Business. **What happens next?** If you are shortlisted, you’ll hear from us after the posting closes. Check out our [How We Hire](https://www.atb.com/company/careers/how-we-hire/) page to learn more about our hiring process. If you need any accommodations throughout this process, please let us know at [talentteam@atb.com](mailto:talentteam@atb.com) **Stay in touch** We’re excited that you’re interested in a career with ATB. Follow us on [LinkedIn](https://www.linkedin.com/company/atb-financial/?viewAsMember=true), [Facebook](https://www.facebook.com/ATBFinancial/) and [Instagram](https://www.instagram.com/atbfinancial/?hl=en) to learn more about what our team is up to.