Information Systems Audit Manager Job Details | CPKC

Canadian Pacific Railway; Calgary; On-site; CAD 95,000 - 120,000; Full time

Job summary

A leading North American railroad company is seeking an IS Audit Manager to lead complex audits and strengthen information system controls. This role requires a university degree in Computer Science or a relevant field along with substantial experience in IT and audits. Essential skills include strong leadership and analytical capabilities, along with a CISA certification. The position is based in Calgary, Alberta, and offers a competitive benefits package and a commitment to diversity and inclusion.

Benefits

Flexible and competitive benefits package

Competitive pension plans

Employee share purchase plan

Annual fitness subsidy

Part-time studies program

Qualifications

• Minimum of 8 years in Technology and 5 years in Audit/Risk experience.
• CISA certification is required; other certifications are a plus.
• Expert knowledge of IT Risk Management practices.

Responsibilities

• Lead complex IS audits across CPKC and its subsidiaries.
• Conduct risk-based planning, fieldwork, reporting, and supervision.
• Present audit reports to management and obtain clear action plans.

Skills

Leadership in IS audits

Cybersecurity

IT Governance

Strong presentation skills

Analytical skills

Education

University degree in Computer Science or Information Systems

Tools

NIST 800-53

ISO 27001/2

COBIT

Job description

Join CPKC, North America’s first transnational railroad connecting U.S., Canada, and Mexico, where your career drives progress and safety is paramount. We connect communities, fuel economic growth, and provide meaningful work in a culture that values diversity, accountability, and pride. With opportunities for training, development, and advancement, you’re not just building a career—you’re part of something bigger. Together, we move goods, connect people, and create lasting change. Your future starts here.

Purpose of the Position

The IS Audit Manager will lead complex information systems audits across CPKC and its subsidiaries, providing actionable recommendations to strengthen controls and mitigate risks. This role is responsible for executing and enhancing the IS audit program, managing multiple priorities, and ensuring clear communication of results to management. Key areas of focus include Cybersecurity, IT Governance, IT Infrastructure Audits, Cloud Security, Data Protection, SAP Audits, Industrial Control Systems, Supervisory Control and Data Acquisition reviews, supporting the modernization of the internal audit function.

Position Accountabilities

• Support the development and implementation of a risk-based IS audit plan to provide CPKC Management and the Board of Directors with an independent, objective assessment of the design and operating effectiveness of information system controls
• Conduct risk-based planning, fieldwork, reporting, and supervision of IS audit and advisory engagements
• Complete engagements effectively within scope and budget, in accordance with established standards and IT frameworks
• Perform root cause analysis for non-compliance and other audit observations, and provide value-added recommendations and management insights
• Present audit reports to management at various levels and obtain clear action plans that address identified business risks
• Communicate results through strong presentation, negotiation, and report-writing skills, and support an effective follow-up program to ensure timely corrective action on risk exposures
• Follow up with management on action plans to ensure they adequately address risks; participate in developing the annual audit plan and maintaining the IS audit universe
• Maintain objectivity and independence while fostering positive, professional relationships with management

Position Requirements

• University degree in Computer Science, Information Systems, or another relevant field required
• Minimum of 8 years in Technology and 5 years in Audit/Risk experience
• Proven experience leading large IS audits and projects in the specialized IS areas noted above, with strong results delivered
• CISA certification is required; CISSP, CISM, and CIA certifications are considered an added advantage.
• Experience using NIST 800-53, NIST Cybersecurity Framework, Center for Internet Security (CIS), ISO 27001/2, COBIT, ITIL, and CMMI for various audits
• Expert knowledge of IT Risk Management practices and strong business acumen, including applying advanced analytics aligned with modernized audit principles and techniques
• Understanding of the rail industry would be considered an asset

What CPKC Has to Offer

• Flexible and competitive benefits package
• Competitive company pension and/or retirement plans
• Employee share purchase planPerformance incentive plan
• Annual fitness subsidy
• Part-time studies program

Pre-Employment Requirements

Background Investigation

• Criminal history check
• Education verification
• Professional references

Becoming a Railroader

As an employee with a North American presence, the possibility does exist that the location of your position may be changed based on organizational requirements.

Management Conductor Program

Becoming a qualified conductor or locomotive engineer is the single best way for a management employee to learn the business at CPKC. You may be required to obtain a certification or to maintain your current certification/qualification as a conductor or locomotive engineer.

Culture of Inclusion

For our U.S. applicants, CPKC is an equal opportunity/affirmative action employer, inclusive of protected veterans and individuals with disabilities. For Canadian applicants CPKC is an employment equity employer committed to the principles of employment equity and inclusion. We encourage all qualified candidates to apply including: women, Black, Indigenous, People of Color (BIPOC), members of the LGBTQ+ community and people with disabilities. Accommodations for the job application process can be provided, as appropriate, upon request. All applicant information will be managed in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

• Req ID: 105353
• Department: Finance & Accounting
• Job Type: Full-Time
• Position Type: Non-Union
• Location: Calgary, Alberta
• Country: Canada
• % of Travel: 0-10%
• # of Positions: 1
• Job Grade: 3
• Job Available to: Internal & External