Senior Auditor, Internal Systems

The Internal Audit Analyst will play a key role in formalizing, implementing, and maintaining the non-financial audit and risk control environment that underpins Ross Video's information security and regulatory compliance efforts. The role is central to helping the organization transition from ISO 27001 alignment to full certification-readiness within the next 12 months (target maturity CMM 3.5+), while also supporting control design and evidence collection to demonstrate compliance with applicable data protection laws (e.g., PIPEDA, GDPR).

Working cross-functionally with the Corporate Security, Legal, and IT teams; and external audit partners, this role requires hands-on capability in designing audit controls, validating control effectiveness, and preparing internal artefacts to support external audits and assurance engagements.

This opportunity is well-suited to someone with 3-4 years of public audit experience who is ready to take meaningful ownership of internal audit program development within a mature but fast-moving technology environment.

Collaborate with internal stakeholders to design and implement operational audit controls aligned with ISO 27001:2022 and supporting standards (e.g., ISO 27017)

Perform ongoing audit and control testing activities across business units and systems, using approved AI-enabled tools where appropriate to support evidence review, pattern identification, and continuous improvement of control outcomes

Maintain the internal controls catalogue and audit evidence repository to support external attestation efforts and regulatory inquiries, including the appropriate use of AI-enabled tools to improve organization, traceability, and retrieval of audit artefacts

Lead recurring audit assessments and control reviews; use approved AI-enabled tools to support analysis, summarization, and preparation of clear findings and recommendations for senior stakeholders

Support integration of privacy and security controls mapped to in-scope legal and regulatory obligations (e.g., GDPR, PIPEDA, CCPA)

Track remediation progress and ensure follow-up on control gaps or process deficiencies identified through internal reviews or external audits

Develop and maintain policies and procedures in alignment with ISO/IEC 27001:2022 standards\

Maintain a centralized repository of policies and procedures and monitor compliance with established document governance requirements

Maintain and administer the organization's risk register, ensuring risks are accurately documented, assessed, and monitored

Facilitate risk identification, assessment, mitigation, and reporting activities across business and technology functions

Bachelor’s degree in Accounting, Information Systems, Commerce, Finance, or related field

Minimum 2 years of experience in internal audit or external/public audit functions

Hands-on experience with control testing, evidence gathering, and audit execution across security/privacy frameworks (e.g., SOC 2, ISO 27001, HIPAA, PCI)

Exposure to IT risk management, information security, or governance functions desirable

Proficiency in Microsoft Excel and Word

Experience auditing or analyzing systems across cloud environments (e.g., AWS, Azure)

Familiarity with both Windows and Unix environments

Knowledge of security tooling, configuration management, or systems architecture a plus

Strong analytical and problem-solving skills with demonstrated ability to operationalize abstract controls

Effective communicator able to translate technical or regulatory content to non-technical stakeholders

High degree of rigor and ownership; able to operate independently in a control-heavy, deadline-driven environment

Demonstrated commitment to professional development in audit, risk, or security domains