--

What will your typical day look like?

This position is responsible for leading and maintaining work associated with Deloitte technology Canada SOC 2 and SOC 1 compliance program, which includes managing the day-to-day responsibilities of gathering evidence, scheduling resources, coordinating with control owners and external auditors, and identifying potential audit issues/operational improvements specific to the SOC 2 and SOC 1 audits. In addition, team is responsible to respond to client security questionnaires, client audit requests and provide input to client MSA/SOW.

Work includes:

• Liaise with external auditors to scope and facilitate audits gathering and presenting evidence as required to support SOC 2 and SOC 1 audits.
• Lead and handle all stages of SOC 2 and SOC 1 audits, ensuring successful completion.
• Understand technology controls that impact on-premises and cloud technology, operational risk to the organization as well as related laws, regulations, and industry standards, specifically related to internal and cloud technology solutions.
• Assess technology and operational risks related to internal and cloud technology solutions providing input to personnel on appropriate controls to address audit risks
• Recommend policies, standards, procedures, and controls to assure the confidentiality, integrity, and availability of the information technology environment for on premises as well as cloud hosted IT applications and infrastructure meet the SOC 2 and SOC 1 attestation.
• Manage audit findings; identify and track remediation activities to meet target dates for closure, and track/report progress.
• Work with the appropriate personnel to determine scope of SOC 2 and SOC 1 audits.
• Develop and recommend appropriate information security policies, standards, procedures, checklists, and guidelines using generally recognized security concepts tailored to meet the requirements of the organization for on premises as well as cloud hosted IT applications and infrastructure.
• Complete client security questionnaire requests in a timely manner and collaborates with other teams to provide completed questionnaires
• Maintain and update the security questionnaire Answer Library
• Manage client security audit requests
• Work with legal and Risk Management team to review security clauses in MSA and SOW.
   

Enough about us, let’s talk about you

• Bachelor’s degree in computer science, Maths
• Minimum 5 years of directly related experience in the following: managing information technology audits, assessments, remediation management, creating, leading, and managing risk assessment programs.
• Experience with SSAE 18 SOC 2 and various other industry standard frameworks such as: NIST, ISO 27001.
• Experience leading IT internal audit, external audits, and or service organization control reporting and activities.
• Solid understanding of IT general controls and activities.
• Excellent written and verbal communication, listening, and facilitation skills.
• Excellent time management and related organizational skills, including appropriate sense of urgency, a proactive approach, and a suitable ability to anticipate and manage project lifecycle events, issues, and obstacles (preferred).
• Strong understanding of and experience with cloud technologies and security controls.
• Industry certification (e.g., CISA, CISSP, CISM, CPA etc.) preferred.

Total Rewards

The salary range for this position is $104,000 - $215,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth.  Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. Some representative examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, 38+ days off (including 10 firm-wide closures known as "Deloitte Days"), flexible work arrangements and a hybrid work structure.