Control testing auditor IT and Cybersecurity

Randstad Digital is seeking a Senior IT & Cybersecurity Control Testing Auditor for a high-impact contract mandate. Our client is a prominent global player within the financial services and investment banking sector. In this role, you will join a sophisticated risk management team to lead comprehensive reviews within the Annual Control Plan. You will play a pivotal role in evaluating, testing, and mitigating risks associated with information technology, information security, and cyber infrastructure across a complex, multi-jurisdictional environment.

Advantages
Competitive Compensation: Highly attractive hourly contractor rate commensurate with senior-level expertise.

Dynamic Corporate Culture: Work within a sophisticated, multinational financial environment that values diversity, collaboration, and continuous professional growth.

Cutting-Edge Environment: Gain exposure to complex system architectures, modern data analytics pipelines, and advanced cloud technologies.

Hybrid Flexibility: Enjoy a balanced professional lifestyle with a modern hybrid work model based out of our Montreal hub.

Responsibilities
Audit Planning & Execution: Design, scope, and execute comprehensive technology and compliance audits focused on general IT controls and application-specific safeguards.

Process Walkthroughs: Lead detailed walkthroughs of business and technology processes to understand operational contexts, map risk landscapes, and evaluate control designs.

Technical Validation: Perform deep-dive assessments of system architectures, which include data analysis, code inspections, and system re-performance to validate security, system availability, and performance.

Issue Mitigation: Detect vulnerabilities and control deficiencies through rigorous testing, and collaborate with business units to establish robust, timely corrective action plans.

Reporting & Communication: Synthesize complex audit findings into high-quality, formal reports and deliver clear, actionable presentations to executive stakeholders and business leaders.

Stakeholder Engagement: Maintain strategic, ongoing communication lines with Compliance, Risk management, and various lines of business, while assisting management in refining the annual risk-based audit plan.

Qualifications
Education: Bachelor’s degree (B.A./B.S.) in Computer Science, Cyber Security, Engineering, or a related technical discipline.

Industry Experience: 7 to 11 years of professional experience within financial services, investment banking, or broker-dealer corporate environments.

Audit Expertise: 3 to 5 years of specialized experience auditing physical, logical, system, or cybersecurity controls using industry-standard auditing frameworks.

Core Technical Knowledge: Strong understanding of high-risk security domains, including Identity & Access Management (IAM), data encryption, firewalls, intrusion detection/prevention, and insider threats. Familiarity with non-technical pillars like IT governance and project management.

Frameworks & Regulations: Proficiency with industry frameworks and regulations such as NIST, FFIEC, ISO, GDPR, NYSDFS, and FISMA, alongside an understanding of Investment Banking compliance and AML (Anti-Money Laundering) concepts.

Data & Scripting Capabilities: Hands-on experience analyzing complex datasets using tools like Excel, Access, or VBA. Familiarity with scripting languages (Python), relational databases (T-SQL, PL/SQL), and data visualization software (PowerBI, Spotfire, Microstrategy) is highly desired. Cloud infrastructure audit experience is an asset.

Professional Certifications: Holding designations such as CISA, CISSP, CIA, CPA, or relevant securities licenses is considered a strong asset.

Screening Requirement: Due to compliance obligations tied to US Federal Securities legislation, the selected candidate must be willing to undergo enhanced background vetting, which includes a third-party fingerprinting process managed via FINRA.

Our client operates in Canada. The company takes all reasonable steps to limit the number of positions in Quebec that require knowledge of a language other than French, and only requires it when necessary and its existing bilingual employees are unable to perform these duties. Based on an assessment conducted by our client, it has been determined that this position requires candidates to be fluent in English (both spoken and written). In particular, this position will require the employee to interact with centralized internal departments (e.g., Operations / HR / Finance / Legal / Contracts / Sales) that support the organization in Canada and that do not speak French.

Summary
Location: Montreal, QC (Hybrid)

Position Type: Contract / Independent Consultant

Duration: Long-term contract

Domain: Financial Services / Investment Banking / Cybersecurity Audit

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.