Consultant, Internal Audit

Summary

Celestica is the brand behind the brands you love in cutting-edge technology solutions, partnering with some of the world’s largest companies across diverse sectors like tech, enterprise, communications, automotive, aerospace & defense, HealthTech, industrial & smart energy, capital equipment, consumer, and robotics. Within this high-tech global landscape, our leadership relies on IT Internal Audit to objectively evaluate risk management controls and provide value-added recommendations that maintain our world-class standards. As the Consultant, Internal Audit, IT you apply your expertise in IT systems and infrastructure to ensure the adequacy and reliability of internal controls. You tackle problems requiring evaluation of data and security factors to minimize risk exposure. Operating as a Level 10 leader, you have the autonomy to deliver on team goals, influence management on significant technology issues, and resolve conflicts with tact and diplomacy across our global operations in the Americas, Europe, and Asia.

Responsibilities

• Strategic IT Audit Leadership: Lead and conduct comprehensive IT audits and reviews of systems, applications, and IT processes. You are responsible for audits involving new acquisitions and the implementation of emerging technology audits with no prior history or background.
• Security & Infrastructure Oversight: Conduct IT security audits across applications (ERP/SAP, Shop-floor, Quality systems), networks, operating systems, and databases. You evaluate security vulnerabilities and coordinate audit scopes with business units and external security experts. You will also lead assessments of NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) compliance.
• Risk Management Advisory: Provide IT management with guidance on IT risk management, specifically regarding application and infrastructure security. You design risk and control matrices based on evaluations of underlying business risks.
• SOX & Compliance Testing: Perform and review SOX effectiveness testing of IT key controls. You oversee the testing of IT General Controls (ITGC), application controls, and key reports identified during the walkthrough process.
• Systems Implementation Reviews: Perform pre- and post-implementation reviews of major system enhancements or new global deployments to ensure control integrity from the design phase through to go-live.
• Stakeholder & Relationship Management: Interface with senior managers on issues related to your area of IT expertise. You coordinate with management to formulate action plans and lead follow-up activities to verify the resolution of identified deficiencies.
• Annual Audit Planning: Participate in the formulation of the annual audit plan, defining the scope, purpose, and objectives of IT-specific audits. You act as a liaison to outsourced internal auditors and provide IT support to operational auditors.
• Liaison & Influence: Interact with and influence management on significant IT and security issues, ensuring that cost-effective solutions are implemented to improve controls and enhance business operations.

Critical Skills

The ideal candidate for this role will have:

• IT Control Knowledge: Experience in IT General Controls (ITGC) related to logical/physical security, change management, business continuity, and network layers.
• Technical Infrastructure Knowledge: Understanding of complex IT infrastructures, including cloud-based solutions (Google Cloud, Azure, and AWS platforms) and networking (firewalls, routers, active directory).
• Information Security Expertise: Knowledge of security standards (ISO-27000 series), frameworks (COBIT, NIST, COSO), and the current enterprise threat landscape as it relates to global manufacturing.
• ERP Proficiency: Experience auditing SAP or similar integrated business applications and their interfaces is a plus.
• Analytical Problem Solving: Ability to evaluate diverse factors and build business cases to provide high-impact recommendations to senior leadership.
• Communication & Diplomacy: Ability to communicate findings to "busy" auditees and management with tact, ensuring a collaborative approach to remediation.

Education

• Bachelor’s degree in Computer Science, Information Systems, Business Administration, or Accounting is required.
• CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) designation is required.

Experience

• Typically requires 6-8 years of applicable experience in IT audit, information security, or IT risk management, preferably within a global manufacturing environment.
• Experience conducting cybersecurity assessments, audits, or compliance evaluations
• Working knowledge of NIST SP 800-171, CMMC 2.0 framework, and related DoD cybersecurity policy
• Familiarity with cloud environments (e.g., GovCloud, Microsoft 365 GCC/GCC High) and their CMMC implications
• Proven track record of managing or supporting IT audits and providing recommendations to senior leadership.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.