Consultant/ Senior Consultant, IT Auditor

Putting people first, every day
 

BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a people-first culture with a high priority on your personal and professional growth.

Your Opportunity

We are seeking a Consultant/ Senior Consultant to join the Risk Advisory Services Team in Ottawa or Toronto. As a Consultant or Senior Consultant Auditor, you will support and lead IT audit engagements focused on cybersecurity maturity, regulatory compliance, and IT governance. This role emphasizes assurance and validation and is ideal for professionals with expertise in frameworks such as CIS Top 18, NIST, ISO 27001, OSFI, COBIT and other.
 

Key Responsibilities:

• Review alignment with CIS Top 18, ISO 27001, and NIST Cybersecurity Frameworks.
• Conduct assessments aligned with Canadian regulatory bodies guidance like DGCM, OSFI and BCFSA including maturity scoring and safeguard validation.
• Evaluate user access permissions, system access controls, and physical access protocols across critical systems (e.g., GLs, CRM, banking platforms).
• Assess IT governance structures, including board oversight, strategic alignment, and policy implementation.
• Evaluate Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), and Incident Response Plans (IRP) for completeness and integration.
• Verify compliance with Interac Annual Compliance Certificate requirements.
   

Reporting & Client Engagement

• Prepare audit reports and executive summaries with clear findings and recommendations.
• Present results to client stakeholders and support remediation planning.
• Collaborate with internal teams to scope engagements and ensure quality assurance.
   

How do we define success for your role?

• You demonstrate BDO's core values through all aspects of your work: Integrity, Respect and Collaboration.
• You understand your client’s industry, challenges, and opportunities; client describe you as positive, professional, and delivering high-quality work.
• You identify, recommend, and are focused on effective service delivery to your clients.
  You share in an inclusive and engaging work environment that develops, retains & attracts talent.
• You actively participate in the adoption of digital tools and strategies to drive an innovative workplace.
• You grow your expertise through learning and professional development.
   

Qualifications & Experience

• Bachelor’s degree in Information Systems, Cybersecurity, or related field.
• Professional certifications preferred: CISA, CISM, CRISC, or equivalent.
• 3–6 years of experience in IT audit, cybersecurity assurance, or risk advisory.
• Good understanding of cybersecurity frameworks and guidelines CIS Top 18, NIST, COBIT and ISO27001 frameworks.
• Good understanding of maturity models, risk frameworks, and gap analysis methodologies.
• Experience with cloud platforms, SIEM tools, and access control systems is a plus.
   

Skills & Attributes:

• Analytical and detail-oriented.
• Strong communication and report-writing skills.
• Ability to manage multiple engagements and meet deadlines.
• Collaborative and client-focused mindset.

Why BDO?

Our people-first approach to talent has earned us a spot among Canada’s Top 100 Employers for 2025. This recognition is a milestone we’re thrilled to add to our collection of awards for both experienced and student talent experiences. 

Our firm is committed to providing an environment where you can be successful in the following ways: 

• We enable you to engage with how we change and evolve, being a key contributor to the success and growth of BDO in Canada. 

• We help you become a better professional within our services, industries, and markets with extensive opportunities for learning and development. 

• We support your achievement of personal goals outside of the office and making an impact on your community.

Giving back adds up: Where company meets community. BDO is actively involved in our communities by supporting local charity initiatives. We support staff with local and national events where you will be given the opportunity to contribute to your community.

Total rewards that matter: We pay for performance with competitive total cash compensation that recognizes and rewards your contribution. We provide flexible benefits from day one, and a market leading personal time off policy. We are committed to supporting your overall wellness beyond working hours and provide reimbursement for wellness initiatives that fit your lifestyle.

Everyone counts: We believe every employee should have the opportunity to participate and succeed. Through leadership by our Diversity, Equity and Inclusion Leader, we are committed to a workplace culture of respect, inclusion, and diversity. We recognize and celebrate the valuable differences among each of us, including race, religious beliefs, physical or mental disabilities, age, place of origin, marital status, family status, gender or gender identity and sexual orientation. If you require accommodation to complete the application process, please contact us.

Flexibility: All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place.

Our model is a blended approach designed to support the flexible needs of our people, the firm and our clients. It’s about creating work experiences that meet everyone’s needs and providing flexibility to adjust when, where and how we work to meet the expectations of our role.

Code of Conduct: Our Code of Conduct sets clear standards for how we conduct business. It reflects our shared values and commitments and includes guiding principles to help us make ethical decisions and maintain trust with each other, our clients, and the public.

With your consent, BDO Canada may use AI technology (Microsoft Copilot) to transcribe during preliminary conversations, solely for the purpose of note-taking and not for other purposes, such as resume review, evaluation or selection of candidates.

More information on BDO Canada’s Privacy Policy can be found here: Privacy Policy | BDO Canada

Ready to make your mark at BDO? Click “Apply now” to send your up-to-date resume to one of our Talent Acquisition Specialists.

To explore other opportunities at BDO, check out our careers page.