Job Summary

The Director of Security and Compliance Audits will play a critical role in leading and growing our firm specializing in security and compliance audits and certifications (e.g. SOC2, ISO27001, NIST CSF, HIPAA, GDPR). As a seasoned professional with extensive experience in the field, the Director will oversee all aspects of client engagements (resource supervision & direction, client interactions, file review, report sign-off, quality management, sales and relationship management), ensuring the highest quality of service to our clients.

Key Responsibilities

• Audit Engagement Leadership:

  • Lead and manage complex security & compliance audit engagements.

  • Contracting and audit risk assessment and independence procedures. 

  • Ensure the timely and accurate completion of audit reports.

  • Manage the resources working on each engagement

  • Facilitate scoping, audit findings and other discussions with clients.

  • Accountability to sign reports on behalf of the firm.

• Business Development:

  • Identify and pursue new business opportunities within the security and compliance audit market.

  • Develop and maintain strong relationships with clients and industry partners.

  • Represent the firm at industry events and conferences.

• Quality Assurance:

  • Implement and maintain quality assurance procedures to ensure the accuracy and reliability of audit reports.

  • Review audit work to identify areas for improvement and provide feedback to team members.

• Compliance:

  • Stay up-to-date on industry regulations and standards, ensuring compliance with relevant requirements.

  • Advise clients on best practices for meeting security and compliance standards.

Qualifications

• Qualified Canadian CPA (with public accounting option) or CPA, CA with a minimum of 10 years of experience in security and compliance audits.

• Proven track record of leading complex internal controls, security and/or compliance audit engagements at a senior level, preferably in a Big 4 or similar large audit firm.

• Experience developing and managing client relationships.

• Strong understanding of security and compliance frameworks, including SOC2, ISO27001, SOC1, SOC3, NIST, and GDPR.

• Good understanding of audit firm risk and independence processes.

• Excellent communication and interpersonal skills.

• Ability to manage multiple projects simultaneously and meet deadlines.

• Proficiency in relevant audit tools and software.

Compensation and Benefits

• Competitive salary commensurate with experience.

• Remote work arrangement.

• Potential for performance-based bonuses and equity.

• Flexible work hours.