Senior IT Audit Specialist

Senior IT Audit & SOC 2 Specialist

Job Type: 3 Month-Contract
Location: Toronto, ON
Start Date/End Date: January 2, 2027 - March 31, 2027
Work Model: Fully In-Office
Salary: $70-$80 per hour

About the Opportunity

We are seeking an experienced Senior IT Audit & SOC 2 Specialist to support the transition of core financial systems to a cloud-based environment.

This senior advisory role will focus on SOC 2 assurance, Oracle Cloud oversight, technology risk, and the effectiveness of IT and business controls. The successful candidate will work with stakeholders across finance, infrastructure, technology, and shared services to assess SOC 2 audit coverage, strengthen assurance processes, and support readiness for an upcoming system reliability audit.

This position requires strong technical knowledge, sound business judgment, and the ability to guide both technical and non-technical stakeholders in fulfilling their governance and oversight responsibilities.

Key Responsibilities

• Assess the adequacy of SOC 2 reports and bridge letters provided by Oracle Cloud in relation to audit objectives
• Evaluate SOC 2 audit coverage and identify gaps relevant to government financial systems and operations
• Design, recommend, and enhance IT and business controls aligned with SOC 2 requirements
• Support program areas in developing and formalizing processes to review, interpret, and rely on SOC 2 reports
• Translate third‑party SOC findings into clear, actionable control requirements and oversight activities
• Educate and guide IT, finance, and business stakeholders on SOC 2 concepts, cloud risks, and control ownership
• Advise management on risks related to cloud governance, access controls, security, change management, and vendor oversight
• Support readiness for the 2026–27 System Reliability Audit, ensuring program areas can effectively discharge accountability responsibilities
• Prepare concise, evidence‑based advice and recommendations for senior and executive leadership

Qualifications

• Demonstrated experience reviewing and assessing SOC 2 reports and related assurance documentation
• Strong IT and business process knowledge, particularly in financial systems
• Experience with cloud‑based environments; Oracle Cloud experience is a strong asset
• Proven ability to design, evaluate, and implement IT and business controls
• Experience supporting audit readiness and governance oversight activities
• Ability to explain complex technical and assurance concepts to non‑technical audiences
• Strong written, verbal, facilitation, and stakeholder engagement skills
• Background in IT audit, technology risk, internal audit, or assurance

**Staffworks may use AI-enabled tools to assist with recruitment activities while maintaining recruiter involvement and respecting applicable privacy and employment regulations.**