Senior Consultant, Audit & Compliance

Toronto, Ontario, Canada

Richter

Richter’s two-platform approach helps owners make the best decisions for their businesses, themselves, and their families, creating value for generations.

View all jobs at Richter

Apply now Apply later

Senior Consultant, IT Risk and Compliance

Richter Toronto Office

Overview

Richter is a Business | Family Office that provides strategic advice on business matters and on families’ financial and personal objectives across generations. With close to 100 years of experience advising at the intersection of family and business, Richter has developed an integrated approach to help business owners find sustainable success. Whether business, personal, or both, Richter is uniquely positioned to address the needs of Canada’s most successful entrepreneurs, private clients, business owners and business families and help them chart a clear path to shape their legacy for the future. Founded in 1926, Richter’s 600-person multidisciplinary team continuously innovates to create value for our people, clients, and community in Canada and in the US.

What we offer:

  • The chance to become a strategic business partner with our clients, building relationships directly with entrepreneurs and businesses to provide them with meaningful advisory and/or audit services;
  • The opportunity to develop your career with the direct support of your managers and firm partners; 
  • A culture that values work-life balance and mental health and well-being. Our firm has taken a fresh approach to these issues, offering a hybrid work environment with flexible hours and resources to support you in your personal journey; and 
  • Investment in your continuing education and professional development through a variety of learning offerings and tuition reimbursement. 

A Day in the life of a Senior Consultant

  • You will primarily work with clients in Toronto and the Greater Toronto Area, with some travel as required depending on the engagement. You may also work with clients in the Montreal area or alongside colleagues from our Montreal office;
  • You will demonstrate proficiency and knowledge of the Payment Card Industry Data Security Standard (PCI DSS);
  • You will provide value-added and relevant analysis of clients’ controls;
  • You will suggest practical and relevant recommendations on findings noted;
  • You will work as a collaborative team player alongside the engagement lead and other engagement team members;
  • You will interview client management and be able to identify key risks and controls where applicable;
  • Assist with the management, development, and growth of the practice;
  • Maintain up-to-date knowledge of related frameworks and trends.

Mandates will include:

  • Payment Card Industry (PCI) audits, readiness assessments and consulting mandates

When not working on PCI mandates, the successful candidate may support:

  • SOC 1 and SOC 2 auditing and reporting
  • ISO 27001 readiness consulting mandates
  • Public Key Infrastructure (PKI) assurance engagements
  • Threat and Risk Assessments (TRA)
  • Cyber maturity assessments

About you

  • 3 to 5 years progressive experience in IT security auditing and/or consulting, which can include internal audit, PCI, SOC, and/or ISO 27001 reviews and assessments
  • Knowledge of PCI DSS and scoping of cardholder data environments
  • Knowledge of network security and cloud security
  • Proficiency and hands-on experience in creating audit plans, and planning audit testing procedures
  • Fluency in English (spoken and written); fluency in French would be an asset
  • Security designation: CISSP or CISM
  • IT audit designation: CISA or ISO 27001 Lead Auditor
  • Team spirit, with a focus on collaboration, information-sharing and quality
  • Ability to quickly develop good interpersonal relationships with colleagues and clients
  • Advanced proficiency with Microsoft Office, including PowerPoint, Excel and Word
  • Ability to work independently, including conducting client interviews, reviewing evidence, documenting and reporting on results
  • Experience leading/mentoring junior staff is an asset
  • Previous experience as a PCI Qualified Security Assessor is an asset

What’s in it for you?

  • Competitive group benefits which include group insurance, Health Spending Account, savings plans, and Employer Contribution Matching
  • Employee and Family access to virtual healthcare network
  • Employee and Family Assistance Programs, including consultations with mental health professionals
  • Annual Health & Well-being Program
  • Hybrid work Environment
  • Competitive Performance Bonus
  • Tuition Reimbursement
  • Professional Dues Reimbursement
  • Academic Incentives
  • Talent referral bonus
  • Client referral bonus
  • Access to an on-demand concierge nannying, babysitting, and tutoring service
  • Annual employee rewards and recognition

Your application

We are excited to meet motivated professionals who are looking for career growth in a mid-sized family minded firm and have a strong background in building and fostering relationships.

Sounds like you? Apply today!  

Apply now Apply later
  • Share this job via
  • 𝕏
  • or

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  0  0  0

Tags: Audits CISA CISM CISSP Cloud Compliance ISO 27001 Network security PCI DSS PKI Risk assessment SOC SOC 1 SOC 2

Perks/benefits: Career development Flex hours Flexible spending account Health care Salary bonus

Region: North America
Country: Canada

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.