Thomson Reuters

Senior Cyber Compliance & Audit Analyst

Join Thomson Reuters in Toronto as a Senior Cyber Compliance & Audit Analyst. Leverage ServiceNow for IT audit, compliance, and risk management. 4+ years experience required. Hybrid work, career growth, and competitive benefits offered.

ServiceNow Role Type:
Department - JobBoardly X Webflow Template
System Administrator
ServiceNow Modules:
Department - JobBoardly X Webflow Template
Governance, Risk, and Compliance
ServiceNow Certifications (nice to have):
Department - JobBoardly X Webflow Template
Certified System Administrator

Job description

Date - JobBoardly X Webflow Template
Posted on:
 
May 14, 2025

Join Thomson Reuters as a Senior Cyber Compliance & Audit Analyst in a hybrid work environment. As a key member of the team, you will assess and test controls, identify non-compliance issues, and recommend improvements. This is an exciting opportunity to advance your career in IT Audit and make a real-world impact.

Requirements

  • Bachelor's degree in IT, Accounting, Finance or equivalent education and experience
  • At least 4+ years of relevant work experience in SoX, ITGC, SOC, PCI within Audit, Big 5, consulting firms or as line 1a or line 1b completing IT-IS control testing or working within a Governance or Compliance function across Financial Services organizations
  • One of these certifications in order of preference: CISA, CISSP, CCAK, CISM, CRISC or ISO (preferred)
  • Strong ethical principles and understanding of business and IS ethics
  • Awareness about common security vulnerabilities of web and cloud applications and operating techniques from sources such as SANS, OWASP Top10 and Cloud Security Alliance (CSA)
  • Excellent oral and written communication skills in English. Additional expertise in French, Spanish or another language will be an asset
  • Knowledge about GRC platforms like ServiceNow, Process Unity, RSA Archer, MetricStream and like

Benefits

  • Hybrid Work Model
  • Flexibility & Work-Life Balance
  • Career Development and Growth
  • Industry Competitive Benefits
  • Culture
  • Social Impact

Requirements Summary

4+ years of experience in IT audit, Big 5, or consulting firms, with certifications like CISA, CISSP, or ISO, and knowledge of GRC platforms