Work In Tech

Job Overview:

The Internal Audit Analyst will play a key role in formalizing, implementing, and maintaining the non-financial audit and risk control environment that underpins Ross Video's information security and regulatory compliance efforts. The role is central to helping the organization transition from ISO 27001 alignment to full certification-readiness within the next 12 months (target maturity CMM 3.5+), while also supporting control design and evidence collection to demonstrate compliance with applicable data protection laws (e.g., PIPEDA, GDPR).

Working cross-functionally with the Corporate Security, Legal, and IT teams; and external audit partners, this role requires hands-on capability in designing audit controls, validating control effectiveness, and preparing internal artefacts to support external audits and assurance engagements.

This opportunity is well-suited to someone with 3-4 years of public audit experience who is ready to take meaningful ownership of internal audit program development within a mature but fast-moving technology environment.

Who you report to: Manager, Corporate IT Security & Compliance

What we offer:

Ross offers competitive salaries, comprehensive health plans, and several perks to help you perform at your best.

Some of these perks include flexible hours, generous paid time off, fitness/wellness allowance, an employee share ownership program, development support, and a ton of fun social activities and events!

Best of all, you will be part of the Ross Video family, and we've got an energizing environment here.

What the job is all about:

• Collaborate with internal stakeholders to design and implement operational audit controls aligned with ISO 27001:2022 and supporting standards (e.g., ISO 27017)
• Perform ongoing audit and control testing activities across business units and systems, focusing on evidence-based outcomes and continuous improvement.
• Maintain the internal controls catalogue and audit evidence repository to support external attestation efforts and regulatory inquiries.
• Lead recurring audit assessments and control reviews; publish findings and recommendations to senior stakeholders.
• Support integration of privacy and security controls mapped to in-scope legal and regulatory obligations (e.g., GDPR, PIPEDA, CCPA).
• Track remediation progress and ensure follow-up on control gaps or process deficiencies identified through internal reviews or external audits.

Who you are:

• Bachelor’s degree in Accounting, Information Systems, Commerce, Finance, or related field (required)
• Minimum 2 years of experience in internal audit or external/public audit functions (required)
• Hands-on experience with control testing, evidence gathering, and audit execution across security/privacy frameworks (e.g., SOC 2, ISO 27001, HIPAA, PCI)
• Exposure to IT risk management, information security, or governance functions desirable
• Proficiency in Microsoft Excel and Word (required)
• Experience auditing or analyzing systems across cloud environments (e.g., AWS, Azure)
• Familiarity with both Windows and Unix environments
• Knowledge of security tooling, configuration management, or systems architecture a plus
• Strong analytical and problem-solving skills with demonstrated ability to operationalize abstract controls
• Effective communicator able to translate technical or regulatory content to non-technical stakeholders
• High degree of rigour and ownership; able to operate independently in a control-heavy, deadline-driven environment
• Demonstrated commitment to professional development in audit, risk, or security domains

Bonus points if you have one or more of the following:

• CISA (Certified Information Systems Auditor)
• ISO 27001 Lead Auditor
• CIA (Certified Internal Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CPA (Certified Public Accountant)

Other Requirements:

• Willingness to travel occasionally (up to 10%) to conduct on-site audits or control walkthroughs
• Ability to occasionally lift equipment (up to 50 lbs.) as part of audit fieldwork setup, where required