The mission of the Internal Audit Department is to provide world class, responsive service to Domtar’s stakeholders by delivering independent, objective assurance and consulting services designed to add value and improve the Company’s operations and systems of internal controls. The Internal Audit Department assists the Company with accomplishing its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, business processes, internal controls, and governance processes. 

Reporting to the Director IT Internal Audit, your role as a Senior IT Audit Analyst, as an independent party, will be to assess the effectiveness of the organization’s IT risk management, governance, and internal controls processes. You will participate in the execution of the IT audit plan under the supervision of audit management. Your insights into IT processes, IT risks, and cybersecurity will be crucial during testing, and when recommending and monitoring remediation plans. 

You will have opportunities to develop your skills and contribute to enhancing the overall effectiveness and efficiency of the Internal Audit Department. In addition, as part of your role, you will assist in the review of IT compliance according to the company policies and procedures and the requirements of the Sarbanes Oxley Act (SOX). 

 Poste aussi affiché en français sous le titre Analyste principal-e Audit TI 

Job Responsibilities/Accountabilities: 

• Refine and test IT SOX-related general controls and application controls;
• Plan and perform IT audits based on key risks approach according to annual audit plan, while maximizing efficiency of audit approach;
• Write audit results and conclusions in audit reports in a concise and precise manner, including practical recommendations to improve processes, systems and controls;
• Review and critically assess risk assessments and remediation plans developed by IT teams;
• Work in collaboration with the business units and process owner management to inform, assist and improve the IT internal control environments;
• Support project management activities throughout all project phases;
• Execute and coordinate any on-demand or unplanned audit activities;
• Establish and maintain excellent relationships with business stakeholders;
• Be a change agent to drive and effect desired change throughout the IT organization.

Key Skills: 

• Demonstrate attention to detail, strong organizational skills, tolerance for uncertainty, and ability to be agile and adaptable;
• Strong interpersonal, communication, presentation and report writing skills;
• Ability to express ideas in a simple, clear and convincing manner;
• Strong analytical, problem-solving, and decision-making skills;
• Use current technology and tools to enhance the effectiveness of deliverables.
• Knowledge of French a strong asset

Professional Experience/Qualifications: 

• University degree in computer science, information systems, information technology, accounting, or a related discipline;
• Minimum of three (3) years of experience in IT Audit and IT SOX;
• CISA or CRISC certifications are required; other professional designation will be considered an asset (CPA, CIA, CISM, CFE, CISSP, CISSM);
• Proficiency with ERP, database, server and security controls (SAP, JD Edwards, Linux, Windows or other);
• Knowledge of ACL is considered an asset.