SWIFT Auditor

LeverageTek is actively seeking a SWIFT Auditor for a 1-month contract with its Ottawa-based customer. Work LocationRemoteSecurity RequirementMust have a Government of Canada Enhanced Reliability Clearance.Key TasksAsses all mandatory controls as set out in the CSCF version of the applicable year, in line with architecture type and infrastructure. Assessor to perform a point in time evaluation of control effectivenessAct as “lead assessor” and perform quality assurance work, including reviewing the working papers and audit evidence gathered by Internal Audit teamPerform additional audit procedures, according to professional judgement and as required (e.g., interviews with the SWIFT team) to get comfortable with the results of the work performedDocument their notes and assessment work in SharePoint online, according to IIA standardsReview and complete on the SWIFT CSCF Assessment Template for Mandatory Controls, obtaining adequate supporting evidenceComplete and sign a completion letter confirming that the assessor was engaged to assess compliance level against the Customer Security Controls FrameworkProvide a formal report describing the assessor’s cleared confirmation of compliance for each mandatory control (including how they came to compliance conclusion) along with documentation of observed implementation defects for non-compliance subject to remediationKey QualificationsPrevious experience knowledge / performing SWIFT assessmentsAt least five (5) years of experience as an Internal Auditor / IT Auditor / External Auditor or equivalentRelevant experience, within last 24 months, to execute a cybersecurity-oriented operational assessment toward an industry standard such as PCI DSS, ISO 27002, NIST SP 800-53, SOC-2, the NIST Cybersecurity Framework or simply CSP/CSCF. Other industry standards are permissible if they provide the same level of robustnessQualificationsPrevious experience knowledge / performing SWIFT assessmentsAt least five (5) years of experience as an Internal Auditor / IT Auditor / External Auditor or equivalentOne of the following industry-relevant professional certification PCI Qualified Security Assessor (QSA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), ISO 27001 Lead Auditor or System Administration, Networking, and Security Institute (SANS) GIAC (Global Information Assurance Certification)Relevant experience, within last 24 months, to execute a cybersecurity-oriented operational assessment toward an industry standard such as PCI DSS, ISO 27002, NIST SP 800-53, SOC-2, the NIST Cybersecurity Framework or simply CSP/CSCF. Other industry standards are permissible if they provide the same level of robustnessAssetsExperience with SharePoint Online would be an assetAbout LeverageTek IT SolutionsThank you for taking the time to apply! Since our company’s inception in March 2003, LeverageTek IT Solutions has worked resolutely to become one of the industry’s most recognized and trusted suppliers of technology staffing and business consulting services. With hundreds of successful engagements to our credit with many of Canada’s leading public and private sector organizations, we are the experts in identifying, deploying, and supporting IT and business talent on a contract, contract-to-hire, and permanent basis. We work with customers across all sectors including academia, aerospace, aviation, finance, government, health care, high tech, military, not-for-profit, and more.Our responsive service and ability to deliver the right fit, on time and within budget, typically leads to repeat engagements and a long-standing relationship.Accessibility accommodations are available upon request.