IT Auditor and Risk Advisor

1871 company; Calgary; Hybrid; CAD 80,000 - 100,000; Full time

Job summary

A leading organization in Calgary is seeking an IT Auditor and Risk Advisor to evaluate risk management, control, and governance processes. This role involves conducting audits and providing recommendations for improvement. The ideal candidate should have a bachelor's degree and over 4 years of relevant experience demonstrating strong analytical and communication skills. Optional hybrid work is available.

Benefits

Extended Healthcare Plan

Competitive Compensation and Bonus Plan

Vacation and Earned Time Off

Qualifications

• 4+ years of risk management, internal audit or business process improvement experience required.
• Solid understanding of risk management processes and internal control frameworks (COSO or COBIT strongly preferred).
• Advanced communication skills, both verbal and written.

Responsibilities

• Execute all aspects of risk-based audits including planning, interviews, and document review.
• Build strong relationships with stakeholders to advise on risk and control best practices.
• Report on the overall assessment of the audit including the aggregate impact of risks.

Skills

Risk management

Auditing

Data analytics

Cyber security

Communication

Education

Bachelor’s degree

Tools

SQL

ACL

Tableau

Microsoft Access

Excel

Job description

Job Title: IT Auditor and Risk Advisor

Job Level: FIN C

Date posted: Aug 5, 2025

Closing Date: Aug 17, 2025

Job Type: Full-time Permanent

Category: Internal/External Opportunities

Location: Calgary

Job Summary

Reporting to the Director, Internal Audit & Enterprise Risk Management, the IT Auditor and Risk Advisor will have the opportunity to work on audits, advisories and management requests covering many areas of AltaLink’s operations with a specialization in Information Systems. You will be part of a team that evaluates the effectiveness of the company's risk management, control and governance processes. Assignments will include audits and reviews of various business processes, with the aim of determining the adequacy, effectiveness and/or efficiency of existing procedures. You will provide value-added recommendations and advice to management for improvements to operations in both specifically Information Systems and across the organization.

Responsibilities:

• Execute all aspects of risk-based audits including planning, interviews, document review and testing, process observation and analysis
• Build strong relationships and work collaboratively with stakeholders to identify areas for improvement and advise on risk and control best practices
• Report on the overall assessment of the audit including the aggregate impact of risks or weaknesses exposed, supporting conclusions and recommend appropriate actions to Senior Management
• Demonstrate proficiency in applying information systems audit principles, skills and techniques
• Interview select personnel and document and assess business processes and information systems to determine the adequacy of the control environment
• Understand financial, operational and compliance risks which impact information systems
• Serve as a subject matter expert for data analytic techniques
• Provide insight and guidance on the interpretation of reported exceptions/analytic output so that appropriate actions are taken
• Identify opportunities to optimize the audit process and develop improvements to existing risk management approaches
• Work with the business to identify and document effective internal controls over financial reporting (ICFR)
• Develop audit programs, complete field work, perform testing procedures, and document effectiveness results
• Build, develop and maintain strong relationships across the organization, to encourage the early and open discussion of issues arising and joint commitment to problem solving
• Share industry knowledge and technical expertise with team members
• Assist in the preparation of the annual audit plan and quarterly reports submitted to the Audit Committee

Qualifications:

• Bachelor’s degree and interest in working towards appropriate professional designation (CPA, CIA, CISA, CRM, CRISC)
• 4+ years of risk management, internal audit or business process improvement experience required
• Solid understanding of risk management processes and internal control frameworks (COSO or COBIT strongly preferred)
• Solid understanding of cyber security principles and frameworks such as NIST and ISO 27001
• ISO 27001 lead auditor certification or similar experience is considered an asset
• Solid analytical skills and ability to understand complex business concepts, functions or processes, identify risks and mitigation activities, assess effectiveness of those activities and develop recommendations for issues identified
• Demonstrated knowledge of networks technology, operating systems, system development, client/server architecture, cloud and virtual machines platforms and how they interact with business processes
• Experience auditing SAP security controls and knowledge of other SAP GRC modules
• Knowledge of Critical Infrastructure Protection (CIP) and Critical Security Controls (CSC) preferred
• Experience and knowledge in data analytics, continuous monitoring/auditing and report preparation, leveraging tools such as SQL, ACL, Alteryx, Tableau, Microsoft Access, Excel
• Advanced communication skills, both verbal and written, with the ability to express thoughts in an organized, concise manner and listen to the issues of others in a manner that elicits cooperation and support
• Ability to work independently as well as demonstrate good teamwork
• Ability to multi-task, attention to detail, strong analytical skills, healthy professional skepticism
• Proven ability to partner effectively across all levels of an organization and develop positive working relationships.

Notes:

Internal candidates can submit their resume internally via https://referrals.workable.com/altalink/jobs/

External candidates can submit their application via Workable externally at AltaLink - Current Openings (workable.com).

AltaLink employees should be aware that we may contact your manager during the selection process. Some positions may require job specific assessments, regular criminal record checks, additional AltaLink training, medical assessments, annual drivers abstract, and drug tests. Please contact the Hiring Manager or Recruiter for further clarification if required.

We thank all candidates for their interest in a career with AltaLink. Due to the high volume of applications, we will only be contacting candidates being considered for an interview.We sincerely appreciate all interest and invite all candidates to follow us on LinkedIn, Facebook and/or X.

In proceeding with your application, you will be required to submit personal information to AltaLink through our applicant tracking service provider and this information will be accessible to AltaLink personnel involved in AltaLink’s hiring processes. AltaLink also relies on third parties to assist in the hiring process and your information may be provided to them for this purpose.In the application process, AltaLink will require you to provide consent to the collection, use, and storage of your personal information for these purposes.

At AltaLink, we celebrate diversity and inclusion. We are committed to fair employment practices, and all qualified applicants will receive consideration for employment regardless of race, religious beliefs, colour, gender, gender identity, gender expression, physical disability, mental disability, age, ancestry, place of origin, marital status, family status, source of income, sexual orientation or any other category protected by applicable provincial or federal law.

For eligible positions AltaLink offers optional hybrid work that provides flexibility between working from home and the office.

• Extended Healthcare Plan (Medical, Disability, Dental & Vision)
• Spending Accounts
• Competitive Compensation and Bonus Plan
• Defined Contribution Pension Plan and Group RRSP
• Group Life Insurance
• Hybrid Work Schedule for Eligible Roles
• Employee Assistance Program
• Vacation, Earned Time off, Birthdays Off Work and 13 Recognized Holidays
• Tuition Reimbursement
• Social Club
• Onsite Parking and Onsite Gym
• Wellness Programs