Senior Risk and Audit Specialist (Fintech)

Location: Mississauga, Canada; hybrid work with a minimum of 2 days in the office per week

Salary: CAD 84,000–110,000 per year, based on experience

Company

hirify.global is a diversified service and financial solutions company operating across student lending, consumer lending, payments, renewable energy, and K–12 and higher education.

What you will do

• Conduct risk assessments of Canadian Student Lending products, processes, and operations, identifying emerging risks, control gaps, and required oversight.
• Evaluate control design and operating effectiveness, validate exceptions, investigate root causes, and develop mitigation and corrective action plans.
• Coordinate third-party and client-mandated audits, including CSAE 3416, SOC 1/SOC 2, CSAE 3530, ITGC, information security, and regulatory compliance audits.
• Prepare audit workpapers, risk assessments, reports, presentations, and metrics for management and governance committees.
• Advise business stakeholders on regulatory, compliance, operational, technology, cybersecurity, and reputational risks during initiatives and process changes.
• Track remediation activities and support improvements to risk management, governance, compliance frameworks, systems, and procedures.

Requirements

• At least 3 years of experience in risk management, compliance, internal or external audit, information security, or a related field.
• Experience supporting or leading assurance engagements involving CSAE 3416, SOC 1/SOC 2, CSAE 3530, ITGC, information security, and regulatory compliance audits.
• Experience conducting risk assessments, evaluating controls, managing audit findings, and driving remediation.
• Strong knowledge of risk management, internal controls, audit methodologies, governance practices, and the Three Lines Model.
• Working knowledge of COSO, COBIT, NIST, ITSG-33, SOX, SOC reporting, cybersecurity, and regulatory compliance requirements.
• Must successfully obtain and maintain Government of Canada Reliability Clearance (PERC) as a condition of employment.

Nice to have

• CISA, CIA, CPA, CISSP, CISM, CRISC, or an equivalent professional certification.
• Experience in fintech, banking, financial services, technology, or another highly regulated industry.
• Background in technology risk, cybersecurity, IT controls auditing, public accounting, or consulting.
• Experience managing client-driven assurance engagements and external audit relationships.

Culture & Benefits

• Medical, dental, vision, HSA, and FSA coverage.
• Generous earned time off, life and AD&D insurance, and short- and long-term disability coverage.
• 401(k), student loan repayment, employee stock purchase program, and performance-based incentive pay.
• Tuition reimbursement, employee assistance program, and wellness program.
• Welcoming and respectful workplace with equal employment opportunity and reasonable accommodation support.