IT Auditor

JSG (Johnson Service Group, Inc.); Calgary; On-site; CAD 55,000 - 83,000; Full time

Job summary

Johnson Service Group (JSG) is seeking an IT Auditor for a four-month contingent assignment reporting to the Lead Auditor, Internal Audit. The role focuses on IT quality assurance, system integrations, and risk-based assurance across transformation initiatives.

The Senior IT Auditor will assess controls, engage with stakeholders, and produce clear workpapers and actionable recommendations while maintaining independence from management and project delivery.

Qualifications

• CISA certification is required.
• 5-10 years in audit or governance, risk and control focusing on IT audit.
• Strong knowledge of IIA Standards and peer reviews.

Responsibilities

• Plan engagements with risk-based work programs and research.
• Evaluate IT governance, system integration, and cloud-native technologies.
• Identify risks, gaps, and remediation actions.
• Report results to process owners and help develop action plans.
• Prepare complete, review-ready workpapers.

Skills

CISA Certification

IT Audit

Governance & Risk

Communication Skills

Peer Review/IIA Standards

Education

Post-secondary education in Business or IT

Tools

Azure DevOps

Power Automate/BI

Job description

Job Overview

The IT Auditor is a four-month contingent position reporting to the Lead Auditor, Internal Audit, who reports to the Director, Internal Audit. The Director, Internal Audit reports functionally to the Audit Committee of JSG’s client’s Board and administratively to the Vice-President, Finance and Compliance. This reporting structure ensures the independence and objectivity of the Internal Audit Function. The role will provide independent, risk-based assurance and advisory support over JSG’s client’s industry transformation and related information technology system implementations and changes. The primary focus is anticipated to be on IT quality assurance processes and system integrations. The Senior IT Auditor will assess whether key implementation risks, controls, decision criteria, and supporting evidence are appropriately designed and applied before systems are placed into production. Leveraging next-generation technology will be crucial for the success of these engagements. The role will work closely with the Director, Lead Auditor, IT, and business stakeholders while maintaining Internal Audit’s independence and avoiding management or project delivery responsibilities. Priorities and assignments may change during the contract based on emerging risks, implementation timelines, project developments, and JSG’s client’s business needs.

Accountabilities

• Contribute to the planning of engagements, as needed, through leading-practice research, benchmarking, risk assessment, stakeholder consultation, and refinement of risk-based work programs.
• Apply relevant control frameworks, standards, methodologies, and evaluation criteria.
• Gather and analyze sufficient, reliable, relevant, and useful information to support observations, recommendations, and conclusions.
• Evaluate technology implementation risks and controls, including governance, requirements traceability, defect management, system integration, cloud-native technologies, APIs, and Kubernetes.
• Identify and communicate significant risks, control gaps, readiness concerns, and emerging issues promptly.
• Report and present results and recommendations to process owners and facilitate the development of appropriate action plans.
• Prepare clear, complete, and review-ready workpapers that support the work performed and conclusions reached.
• Conduct advisory engagements in support of the transformation, as needed, while maintaining independence and avoiding management or project delivery responsibilities.

Support The Director And Lead Auditor By

• Providing timely insight and foresight on transformation, technology, and emerging risks.
• Coordinating with other auditors to use relevant work and reduce unnecessary duplication.
• Supporting Internal Audit priorities and continuous improvement activities.
• Applying next-generation technology, including AI, automation, and data analytics.
• Providing knowledge transfer and status handover at the end of the contract.

Must Haves

• Professional CISA certification is required.
• Post-secondary education within a Business or IT discipline.
• 5-10 years of experience in audit or related governance, risk, and control, with a focus on IT audit.
• Strong knowledge and application of IIA Standards, including the ability to conduct peer reviews.
• Proven ability to adapt quickly to shifting priorities and manage multiple audit and advisory engagements.
• Proven ability to establish and maintain working relationships with the internal audit team, audit clients, management, and employees.
• Proven ability to resolve challenges proactively, preventing unnecessary escalation.
• Experience with digital transformations and next-generation audit techniques, such as AI, automation, and continuous auditing/monitoring.

Nice To Haves

• Electricity industry experience
• Experience with Azure DevOps and/or Power Automate/BI