Auditor
Job Description
Who We Are: Headquartered in Atlantic Canada with offices across the United States and around the world, Bulletproof has decades of experience in IT, security, and compliance. The company’s footprint now includes users on six continents trusting Bulletproof to address their technology challenges and strengthen their security posture.
Driven by innovative, empowered, and creative teamwork, we build solutions that solve business challenges and deliver overall business improvement for our global clients. At Bulletproof, we are committed to our customers, our team, and our communities.
Bulletproof's practices include Security and Network Operations Centers, Security Assessment & Audit, Quality Assurance and Testing, Project Management, Microsoft Consulting, Managed Services, Managed Security Services, and Product Fulfillment; working together to provide true end-to-end business solutions.
Why Bulletproof: At Bulletproof, our people are the core of who we are and what we do. Founded in Atlantic Canada and now operating globally, it’s our people who drive us and who bring us together. We believe that it’s through trusting and empowering our entire team, that we achieve more.
Bulletproof is a Microsoft Solutions Provider, a FOUR-PEAT Microsoft Canada Workplace Impact Award winner, and crowned the 2021 Microsoft Global Security Partner of the Year. Bulletproof is proud to be a member of the Microsoft Intelligent Security Association. We are committed to helping our customers achieve more.
What the Role Does…
The Practice Lead – Audit & Risk (PL) is responsible for leading business growth for their practice and investigating new verticals for sales in alignment with divisional strategic goals. The PL also deals with the operational tasks of managing a technical team of IT Auditors that is responsible for the delivery of IT/Cybersecurity Engagements.
As a Leader, you will set goals, develop strategies, and ensure that your team meets performance standards. You will provide leadership to motivate groups and individuals to achieve targets. You will coach your staff through positive monitoring, and providing timely feedback. Finally, it is your responsibility to review the final reports and conduct the final presentation to our clients.
Duties and Responsibilities include, but are not limited to: - Defining services offered by the team in alignment with strategic objectives.
- Establishing the delivery of technical testing methodology with related processes and tools
- Work closely with Project Managers (PM) for delivery resource scheduling and to ensure projects stay on schedule and on budget.
- Keep abreast of project status for related practice projects.
- Work on recruiting as needed by providing updated position profiles, interviewing, and selecting candidates.
- Work closely with employees to perform goal-setting and overall performance management tasks.
- Manage and oversee team utilization and capacity individually and collaboratively PMs.
- Define training plans for resources in alignment with department service delivery.
- Align practice performance to the balanced scorecard for the Information Security Services department – for shared success.
- In addition to the above, maintain an individual chargeability rate of at least 60%
- Responsible for all deliverables and quality produced by their practice.
- Provide mentoring and training for team members.
- Lead the team to ensure their growth and success in their career.
- Focus on employee retention.
- Interface directly with managers, employees, clients, partners, and others to clearly define requirements and manage expectations.
- Liaise with clients, taking time to understand clients’ evolving needs, and developing the client relationship through effective communication and personal skills.
- Assist the team with completing tasks as necessary to complete the projects successfully.
- Perform account planning activities for larger clients/accounts, including attending re-occurring meetings to proactively resource upcoming engagements based on client roadmaps.
- Communicate effectively with the global team in a fast-paced work environment.
- Promote and practice company values while leading staff and nurturing a creative, innovative, and enjoyable work environment.
- All other duties as assigned.
Credentials and Education: - Degree in Computer Science, Information Systems, Engineering or related major from an accredited University or equivalent College Diploma and related experience.
- ISO27001 Lead Auditor certification or equivalent.
- Nice to have knowledge of the NIST 800-53 or PCI framework.
- Hands-on experience in projects including ISO 27001 compliance audit/implementation), internal control, business processes review, IT audit, IT general control, cloud computing, IT system implementation.
- Experience in performing or conducting an assessment from start to finish with a risk-based approach to the client's security posture by identifying findings and providing recommendations to reduce risks.
- Must be familiar with InfoSec processes, operational workflows, and businesses.
- CISSP, CISA, CISM, or SANS Certifications are highly desired.
- A good understanding of Linux, Windows, and network security skills
- Understanding of information security frameworks such as COBIT, NIST CSF
Salary range: CAD 105k - 119K
Equal Opportunity Statement: Bulletproof is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Bulletproof is also committed to compliance with all fair employment practices regarding citizenship and immigration status.