Join Our Cybersecurity Audit Team at MHM

At MHM, we are a dynamic and growing audit firm committed to excellence in every project we undertake. We don’t settle for average, and we don’t want you to either. We are results-driven, and we are looking for the best. If you are an experienced audit professional who demands flexibility, great pay, and the freedom to work on your own terms, this is where you need to be.

How to Apply: Send your resume and a brief cover letter to MHM@MHMcpa.ca

Open Positions

  • Job Summary

    The bilingual Senior Security and Compliance Auditor will play a critical role in supporting our audit firm by providing technical expertise and hands-on execution of security and compliance assessments in both French and English. As a seasoned professional with a strong technical background, the Senior Auditor will contribute directly to the delivery of audit services and ensure the highest quality of work.

    Key Responsibilities

    • Audit Engagement Execution:

      • Conduct technical assessments of client systems and controls to identify security and compliance gaps.

      • Gather evidence and document audit findings.

      • Contribute to the development of audit reports.

    • Technical Expertise:

      • Demonstrate a deep understanding of security and compliance frameworks, including SOC2, ISO27001, SOC1, SOC3, NIST, and GDPR.

      • Stay up-to-date on emerging security threats and best practices.

    • Compliance Adherence:

      • Advise clients on best practices for meeting security and compliance standards.

      • Identify and address potential compliance issues.

    Qualifications

    • ISO27001 Lead Auditor required.

    • Bilingual French/English required.

    • CPA, CISA and CISSP certifications are highly preferred.

    • Minimum of 5 years of experience in security and compliance auditing.

    • Strong technical skills, including knowledge of IT infrastructure, networks, and security controls.

    • Ability to conduct technical assessments and document findings effectively.

    • Strong attention to detail and accuracy.

    • Ability to work independently and as part of a team.

    Compensation and Benefits

    • Competitive hourly rate.

    • Flexible work arrangements.

    • Contractual basis.

  • Job Summary

    The Director of Security and Compliance Audits will play a critical role in leading and growing our firm specializing in security and compliance audits and certifications (e.g. SOC2, ISO27001, NIST CSF, HIPAA, GDPR). As a seasoned professional with extensive experience in the field, the Director will oversee all aspects of client engagements (resource supervision & direction, client interactions, file review, report sign-off, quality management, sales and relationship management), ensuring the highest quality of service to our clients.

    Key Responsibilities

    • Audit Engagement Leadership:

      • Lead and manage complex security & compliance audit engagements.

      • Contracting and audit risk assessment and independence procedures. 

      • Ensure the timely and accurate completion of audit reports.

      • Manage the resources working on each engagement

      • Facilitate scoping, audit findings and other discussions with clients.

      • Accountability to sign reports on behalf of the firm.

    • Business Development:

      • Identify and pursue new business opportunities within the security and compliance audit market.

      • Develop and maintain strong relationships with clients and industry partners.

      • Represent the firm at industry events and conferences.

    • Quality Assurance:

      • Implement and maintain quality assurance procedures to ensure the accuracy and reliability of audit reports.

      • Review audit work to identify areas for improvement and provide feedback to team members.

    • Compliance:

      • Stay up-to-date on industry regulations and standards, ensuring compliance with relevant requirements.

      • Advise clients on best practices for meeting security and compliance standards.

    Qualifications

    • Qualified Canadian CPA (with public accounting option) or CPA, CA with a minimum of 10 years of experience in security and compliance audits.

    • Proven track record of leading complex internal controls, security and/or compliance audit engagements at a senior level, preferably in a Big 4 or similar large audit firm.

    • Experience developing and managing client relationships.

    • Strong understanding of security and compliance frameworks, including SOC2, ISO27001, SOC1, SOC3, NIST, and GDPR.

    • Good understanding of audit firm risk and independence processes.

    • Excellent communication and interpersonal skills.

    • Ability to manage multiple projects simultaneously and meet deadlines.

    • Proficiency in relevant audit tools and software.

    Compensation and Benefits

    • Competitive salary commensurate with experience.

    • Remote work arrangement.

    • Potential for performance-based bonuses and equity.

    • Flexible work hours.