Senior IT Audit Specialist

Location: Ottawa, ON (Hybrid)

Security Clearance: Secret (or eligibility to obtain)

Vacancy Status: This posting is for a new vacancy. We are actively hiring for this position.

Salary Range: $110,000 -$150,000 annually, plus benefits.

About Us

Where people, processes, and technology align – that’s the OXARO effect. We provide customized digital operations and cloud, digital, and organizational transformation consulting services. OXARO focuses exclusively on bringing the Canadian public sector leading tools and technologies while upholding stringent security, privacy, and compliance regulations. OXARO is a joint venture by Raymond Chabot Grant Thornton and Doane Grant Thornton, member firms of Grant Thornton International Ltd., active in some 150 countries worldwide. Based in Ottawa, Ontario, our team of 150+ experts empower the Canadian public service in providing our citizens with dynamic solutions from modern government.

The Role

OXARO is seeking an experienced Senior IT Audit Specialist to join our growing advisory practice.

In this role, you will lead and deliver technology risk, cybersecurity, IT audit, governance, and assurance engagements for clients, with a particular focus on Government of Canada and broader public-sector organizations.

This position combines hands-on engagement delivery with project leadership, client advisory, team development, and business development. You will work directly with senior client stakeholders to assess complex technology environments, identify risks and control gaps, and translate technical findings into practical recommendations and executive-level advice.

Day-to-Day Responsibilities:

• Lead and deliver client engagements across areas such as:
• IT internal audits and IT risk assessments
• IT General Controls (ITGC) and application controls
• Threat and Risk Assessments (TRA)
• Cybersecurity risk and maturity assessments
• Vulnerability and penetration testing oversight
• Manage and execute multiple IT risk and advisory engagements from initiation through completion.
• Serve as a trusted advisor to client executives, technology leaders, internal audit teams, cybersecurity teams, and business stakeholders.
• Provide project leadership while supporting client advisory, team development, and business development activities.
• Assess complex technology environments to identify technology risks, control gaps, and opportunities for improvement.
• Translate technical findings into practical recommendations, professional reports, and executive-level advice.

What You Bring To The Table:

• 6+ years of relevant professional experience in IT audit, technology risk, cybersecurity, IT governance, information security, technology assurance, or a closely related field.
• A Certified Information Systems Auditor (CISA) designation in good standing.
• A bachelor’s degree in computer science, information systems, cybersecurity, business, accounting, engineering, or another relevant discipline.
• Demonstrated experience delivering IT risk, IT audit, cybersecurity, or technology assurance engagements.
• Experience assessing IT controls and identifying technology-related risks and control deficiencies.
• Experience preparing professional reports, findings, and recommendations.
• Clear and effective written and verbal communication skills.
• Demonstrated ability to communicate technical risks clearly to senior and non-technical stakeholders.
• Ability to manage multiple priorities and engagements in a consulting environment.
• Currently residing in the Ottawa-Gatineau region and holding, or being eligible to obtain, a Government of Canada Secret security clearance.

Nice To Have:

• Additional professional certifications such as CISSP, CISM, CRISC, CIA, PMP, or ISO/IEC 27001 Lead Auditor.
• Experience working with Government of Canada departments, agencies, or Crown corporations.
• Experience applying Government of Canada security requirements and guidance, including ITSG-33.
• Experience working with recognized frameworks and standards such as COBIT and NIST SP 800-53.
• Experience responding to public-sector RFPs, RFQs, and Statements of Work.

Why Join Us?

• Make an Impact: Play a key role in modernizing Canada's public sector and see the direct impact of your work on our communities.
• Career Growth: As a fast-growing company, we offer significant opportunities for professional development and career advancement.
• Collaborative Culture: Join a supportive and collaborative team where your ideas are valued and you can learn from some of the best in the industry.
• Challenging Projects: Work on a variety of interesting and complex projects that will keep you engaged and continuously learning.

AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.

OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.

Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.

We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.