Senior Information Technology Auditor

Nutrien; Calgary; On-site; CAD 95,000 - 130,000; Full time

Job summary

Nutrien is seeking an IT SOX Auditor to lead end-to-end ITGC and ITAC testing across multiple platforms in Calgary. The role requires hands-on testing, clear documentation, and strong collaboration with IT, Finance, and external auditors to strengthen the SOX program.

The successful candidate will have a CISA or equivalent certification, a bachelor’s degree in a related field, and 6+ years of IT risk and controls experience, with SAP/Oracle EBS experience preferred.

Qualifications

• CISA certification is required or actively pursuing; equivalent audit certifications encouraged.
• Bachelor's degree in information systems, Computer Science, Accounting, Business, or related field.
• 6+ years of IT SOX, ITGC and ITAC testing, or IT governance, risk, and controls experience.

Responsibilities

• Test ITGCs end to end across all in-scope platforms, covering logical access and user provisioning/de-provisioning, privileged/administrative access, segregation of duties, change management, and batch job scheduling related controls.
• Test ITACs (IT Application Controls) including reports/IPEs, access restrictions, configurations/validations/calculations, and interfaces.
• Own the full test lifecycle, from planning scope, conducting walkthroughs, and assessing design and operating effectiveness through building and executing test plans.
• Evaluate and conclude on deficiencies by assessing severity and supporting findings with clear documentation.
• Work with IT control and process owners to validate observations, agree on root cause, and develop remediation plans; perform follow-up and retesting.
• Communicate findings, risk, and recommendations to IT, Finance, and senior leadership in clear language.
• Serve as liaison to external auditors coordinating walkthroughs and evidence to reduce duplication across the SOX cycle.
• Advise on control design for new and changing processes, systems, and technologies; document key IT controls before go-live.
• Contribute to continuous improvement of the IT SOX program including risk assessment refresh and automation in testing.
• Identify and assess risk in Nutrien’s Information Technology environment.

Skills

CISA certification

IT risk & controls

ITGC/ITAC testing

SOX/PCAOB

Education

Bachelor's degree in information systems / CS / Accounting / Business

Tools

SAP

Oracle EBS

Job description

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence.

Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

What You'll Do:

• Test ITGCs end to end across all in-scope platforms, covering logical access and user provisioning/de-provisioning, privileged/administrative access, segregation of duties, change management, and batch job scheduling related controls.
• Test ITACs (IT Application Controls) including reports/IPEs, access restrictions, configurations/validations/calculations, and interfaces.
• Own the full test lifecycle, from planning scope, conducting walkthroughs, and assessing design and operating effectiveness through building and executing test plans.
• Evaluate and conclude on deficiencies by assessing severity (deficiency, significant deficiency, material weakness), articulating the impact on financial reporting, and supporting findings with clear, traceable documentation.
• Work with IT control and process owners to validate observations, agree on root cause, develop practical remediation plans or compensating controls, and perform follow-up and retesting to confirm issues are sustainably addressed.
• Communicate findings, risk, and recommendations to IT, Finance, and senior leadership in clear, business-relevant language.
• Serve as a key liaison to Nutrien's external auditors by coordinating walkthroughs, aligning on scope, timing, and evidence, and resolving differing views constructively to reduce duplication across the SOX cycle.
• Advise on control design for new and changing processes, systems, and technologies, identifying and documenting key IT controls before they go live.
• Contribute to continuous improvement of the IT SOX program, including risk assessment refresh, control rationalization, and use of automation/analytics in testing.
• Identify and assess risk associated with Nutrien’s Information Technology (IT) environment.
• Evaluate the security, reliability, integrity and governance of the IT environment and application systems across all platforms utilized by Nutrien’s in-scope business units.

What You'll Bring:

• CISA certification (Certified Information Systems Auditor) is required. Candidates actively pursuing CISA, or holding equivalent audit certifications such as CPA, CA, CIA, CRISC, CISA, CISM, or CISSP, are also encouraged to apply.
• Bachelor's degree in information systems, Computer Science, Accounting, Business, or a related field.
• 6+ years of IT SOX, ITGC and ITAC testing, or IT governance, risk, and controls experience, ideally within or serving large public (SEC/CSA-registered) companies.
• Big 4 or large national/public-company IT audit background strongly preferred (Deloitte, PwC, EY, KPMG, or comparable).
• Deep, hands-on command of IT risk and control frameworks, including COSO, COBIT, and SOX/PCAOB requirements.
• Proven end-to-end controls testing experience. You've scoped, tested, and concluded independently, not just supported.
• Strong, evidence-based writing and the ability to work self-directed with limited supervision while meeting firm deadlines.
• Unwavering attention to detail, professional skepticism, and integrity.
• Hands-on experience with large ERPs such as SAP (S/4HANA a plus) and Oracle EBS, including security, roles, and configurable controls. (Preferred)

What Success Looks Like in Your First Year

• You independently plan and complete assigned ITGC and ITAC testing across multiple platforms with minimal rework.
• Control owners view you as tough but fair: findings are accurate, well-supported, and paired with practical remediation.
• You've started contributing ideas to strengthen the IT SOX program and improve testing efficiency.

The estimated salary that Indeed, Glassdoor and LinkedIn lists does not represent Nutrien's compensation structure. Nutrien is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

This job will remain posted until filled. In accordance with Nutrien policies, you will be required to undergo a background check, and may be required to undergo a substance test. While we appreciate all applications we receive, only candidates under consideration will be contacted. Applicants must meet minimum age requirements, as permitted by law.