Principal, IT Audit - 461 EN

Export Development Canada | Exportation et développement Canada; Montreal (administrative region); Hybrid; CAD 112,000 - 149,000; Full time

Benefits offered by this job

Hybrid work options

3–4 weeks paid vacation

Wellness programs

Professional development

Job summary

Export Development Canada (EDC) seeks a Principal, IT Audit to lead and execute complex IT audit engagements, balancing hands-on work with strategic oversight. You will guide senior ICs, shape audit scope in high-risk tech domains, and present findings to top management.

We offer hybrid work with three in-office days, relocation support, and a comprehensive benefits package. The role requires deep IT audit expertise and strong communication across stakeholders in a bilingual environment.

Qualifications

• Bachelor’s degree in information systems, computer science, engineering, or equivalent relevant experience.
• Professional certifications (e.g., CISSP, CISM, CRISC, CGEIT, CISA) are strongly preferred.
• Minimum of 8-10 years of relevant experience in IT audit, IT risk, cybersecurity, technology governance, or technology assurance.
• Demonstrated experience leading audits and managing stakeholders at multiple levels.
• Strong knowledge of modern IT environments including cloud, identity, networks, endpoint security, data platforms, and agile delivery.
• Working familiarity with frameworks and standards (e.g., NIST, CIS Controls, COBIT, ISO 2700x) and alignment to IIA standards.
• Excellent communication skills—able to distill complex technical risks into clear, decision-ready insights.
• Strong organizational and project management skills, including the ability to manage multiple priorities and deliver to timelines.

Responsibilities

• Lead and deliver complex IT audits from start to finish, serving as the engagement lead ensuring risk focus, quality, and value.
• Perform hands-on audit work in the most complex and higher-risk areas, including assessing risks, evaluating controls, testing key processes, and forming audit conclusions.
• Define audit scope and approach to focus on critical and emerging technology risks, such as cyber security, cloud services, data and privacy, identity and access management, AI, and third-party technology.
• Guide, review, and challenge audit work performed by Senior Individual Contributors (ICs) to ensure high-quality analysis, sufficient evidence, and sound judgment.
• Develop clear, concise, and impactful audit findings that articulate root causes, risk implications, and meaningful improvement opportunities for senior leadership.
• Prepare and present executive-level audit reports, summaries, and presentations, including material for senior management and the Audit Committee.
• Serve as audit contact for Director and VP-level stakeholders, communicating audit objectives, emerging issues, and conclusions with credibility and clarity.
• Bring a forward-looking perspective to audit work by considering emerging risks, regulatory expectations, and leading industry practices.
• Identify common themes and systemic issues across audits to help inform broader IT risk discussions.
• Support the continuous improvement of IT audit practices, including the use of data analytics and advanced audit techniques.
• Influence audit quality and capability through mentoring, knowledge sharing, and setting expectations.

Skills

Bilingual (French and English)

Excellent communication skills

Organizational & project management

Data analytics awareness

Education

Bachelor's degree in information systems, computer science, engineering, or equivalent relevant experience

Tools

Power BI

ACL/HighBond

IDEA

Python

SQL

Job description

Application deadline: October 8th at 12:00PM ET

Join the EDC Team!

At EDC, we support Canadian businesses to succeed globally. We provide the financial tools and expertise they need to explore new markets, reduce risks, all towards the goal of making Canada and the world better through trade.

Position: Principal, IT Audit

Employment Type: Permanent

Compensation Details:

• Audit 19: Salaries typically range from $112,006 to $149,341 annually, based on qualifications and experiences, plus a performance-based incentive.
• Location: Export Development Canada operates in a hybrid work environment, with a current requirement of three in-office days per week.
• This role can be performed from EDC’s headquarters in Ottawa or from one of our Community Hubs located in Toronto and Montreal
• Relocation assistance is available for candidates who meet the eligibility criteria.

Internal Employees, please consult the ServiceNow article entitled Internal movements – what you need to know.

About EDC:

At Export Development Canada (EDC), we empower Canadian businesses to succeed globally. As a financial Crown corporation, we offer innovative financial solutions and expert insights to help businesses explore new markets, mitigate risks, and achieve growth.

Why Join EDC?

• Comprehensive Benefits: EDC offers a competitive compensation & benefits package, work-life balance, & the opportunity to help make Canada and the world better through trade.
• Work-Life Balance: EDC offers a competitive compensation package & work-life balance. We have hybrid work options, 3 to 4 weeks paid vacation, a corporate closure period, summer early Friday’s & no meeting Fridays.
• Professional Development: Take advantage of our continuous learning opportunities, including training programs, workshops and language training.
• Inclusive Culture: Be part of a diverse and inclusive workplace that champions employment equity & values diversity of ideas, strengths, & backgrounds to succeed.
• Wellness Programs: Access to wellness initiatives, mental health support, and fitness programs to keep you healthy and happy.
• Community Engagement: Participate in volunteer opportunities and give back to the community through our various social responsibility programs.

Team Overview:

The Internal Audit function is comprised of two teams: Internal Audit and CS&R. Both teams provide critical services to our organization (including our subsidiary), customers and stakeholders by consistently applying a risk-based mindset, aligned with the organization’s values and strategic objectives.

Internal Audit

• Provides independent and objective assurance and advisory services, designed to add value and help the organization achieve its business objectives pertaining to operations, reporting, and compliance with laws and regulations.
• Executes a Quality Assurance and Improvement Program (QAIP) to evaluate and ensure the internal audit function conforms with the Global internal Audit Standards, achieves performance objectives and pursues continuous improvements.

The Principal, IT Audit is a senior individual contributor role responsible for leading and executing complex, high‑risk IT audit engagements. The role combines hands‑on audit delivery with leadership through expertise, judgment, and influence, ensuring audits are risk‑focused, high‑quality, and impactful for senior management and the Audit Committee.

As the engagement lead, the Principal is accountable for audit outcomes and leads the most complex and judgment‑intensive work, while guiding and reviewing work performed by Senior Individual Contributors (ICs).

This position does not include direct people management. Leadership impact is achieved through leading engagements, setting direction, exercising professional judgment, and raising the overall quality and effectiveness of IT audit work.

Success in this role is measured by audit impact, strength and clarity of conclusions, executive trust, and the ongoing advancement of IT audit practices.

What You Will Be Doing:

• Lead and deliver complex IT audits from start to finish, serving as the engagement lead ensuring risk focus, quality, and value.
• Perform hands‑on audit work in the most complex and higher‑risk areas, including assessing risks, evaluating controls, testing key processes, and forming audit conclusions.
• Define audit scope and approach to focus on critical and emerging technology risks, such as cyber security, cloud services, data and privacy, identity and access management, AI, and third‑party technology.
• Guide, review, and challenge audit work performed by Senior Individual Contributors (ICs) to ensure high‑quality analysis, sufficient evidence, and sound judgment.
• Develop clear, concise, and impactful audit findings that articulate root causes, risk implications, and meaningful improvement opportunities for senior leadership.
• Prepare and present executive‑level audit reports, summaries, and presentations, including material for senior management and the Audit Committee.
• Serve as audit contact for Director and VP‑level stakeholders, communicating audit objectives, emerging issues, and conclusions with credibility and clarity.
• Bring a forward‑looking perspective to audit work by considering emerging risks, regulatory expectations, and leading industry practices.
• Identify common themes and systemic issues across audits to help inform broader IT risk discussions.
• Support the continuous improvement of IT audit practices, including the use of data analytics and advanced audit techniques.
• Influence audit quality and capability through mentoring, knowledge sharing, and setting expectations.

What we are looking for:

• Bachelor’s degree in information systems, computer science, engineering, or equivalent relevant experience.
• Professional certifications (e.g., CISSP, CISM, CRISC, CGEIT, CISA) are strongly preferred.
• Minimum of 8-10 years of relevant experience in IT audit, IT risk, cybersecurity, technology governance, or technology assurance.
• Demonstrated experience leading audits and managing stakeholders at multiple levels.
• Strong knowledge of modern IT environments including cloud, identity, networks, endpoint security, data platforms, and agile delivery.
• Working familiarity with frameworks and standards (e.g., NIST, CIS Controls, COBIT, ISO 2700x) and alignment to IIA standards.
• Excellent communication skills—able to distill complex technical risks into clear, decision-ready insights.
• Strong organizational and project management skills, including the ability to manage multiple priorities and deliver to timelines.

What will make you stand out:

• A leadership mindset grounded in curiosity, pragmatism, collaboration, and continuous improvement.
• Deep expertise in one or more areas: cybersecurity, cloud security, identity, data governance, third‑party risk, or technology resilience.
• Hands‑on experience using data analytics tools and techniques (Power BI, ACL/HighBond, IDEA, Python, SQL) to enhance audit testing.
• Practical experience with GenAI use cases for audit (e.g., planning, evidence summarization, control mapping, anomaly detection) with appropriate governance.
• Bilingual (French and English).

Eligibility:

EDC is committed to Fair Employment Practices and preference will be given to a candidate who is able to work legally in Canada at the time of application (Canadian Citizens or Permanent Residents). Candidates must meet the requisite government security screening requirements. Internal applicants must also meet EDC’s eligibility criteria for applying to internal opportunities. For more information, please refer to Section 2.1 in the Talent Acquisition Standard, available on LINK under the Resources tab in the Policies & Procedures section.The position is open to those who meet all of the essential requirements stated above and whose applications are received by the closing date.The position is open to those who meet all of the essential requirements stated above and whose applications are received by the closing date.

EDC’s Commitment to Employment Equity

Export Development Canada (EDC) is dedicated to fostering employment equity and building a diverse workforce. We are committed to creating a safe and inclusive environment that respects people from all cultures, backgrounds, and abilities. At EDC, we nurture a culture of inclusion and belonging where everyone has equal opportunity to grow, develop, succeed, and be their truest selves.

We actively encourage applications from women, Indigenous peoples, visible minorities, persons with disabilities, and members of the 2SLGBTQI+ community.

Your application must clearly demonstrate how you meet all the requirements. We thank all applicants’ interest in a career at EDC; however, only those selected for an interview will be contacted. Please note that qualified candidates may be considered for similar roles at this level within EDC.

EDC recognizes that disclosing the need for accommodations can be a personal matter. Please know that as an organization, we are committed to maintaining confidentiality and ensuring that any accommodations provided are tailored to support your needs. Our aim is to ensure you have a comfortable and positive experience throughout the recruitment process, so please do not hesitate to contact us directly for any accommodation requests at [e-mail].

Privacy Notice

By applying for this job you acknowledge that you have read and understood EDC’s Privacy Notice for Job Applicants, which outlines how we collect, use, retain, and safeguard personal information during the recruitment process, as well as your rights of access and correction