Senior IT Auditor

Sobeys; Stellarton; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Sobeys is seeking a Senior IT Auditor to assess technology risk management, cybersecurity, IT operations, and governance across the organization. You will plan and execute risk-based audits, with focus on transformation initiatives and large-scale system changes.

The successful candidate will bring a CISA designation, 5+ years in technology audit, and strong knowledge of governance frameworks. The role offers hybrid work and exposure to enterprise technology programs.

Qualifications

• CISA designation required.
• 5+ years of progressive experience in Technology Audit.
• Experience in cybersecurity audits, IT operational audits, cloud environments.
• Strong knowledge of operating systems, databases, and networks.
• Familiarity with NIST, ISO 27001, COBIT, ISF.
• Excellent written and verbal communication skills; ability to lead.

Responsibilities

• Assist IT Audit Manager in planning, scoping, and executing IT, cybersecurity, and transformation audits.
• Assess design and operating effectiveness of technology and cyber controls.
• Identify gaps, root causes, and actionable recommendations.
• Prepare clear audit reports and communicate issues to management.
• Maintain ongoing stakeholder dialogue throughout audit lifecycle.
• Perform follow-up on management action plans and remediation.
• Provide independent assurance over large-scale transformation initiatives.

Skills

Cybersecurity audits

IT operations audits

Cloud environments

Governance frameworks

Risk assessment

Audit reporting

Stakeholder management

Mentoring

Independent auditing

Education

Bachelor's degree in IT/CS/related

Tools

Operating systems

Databases

Networks

Job description

Sobeys is full of exciting opportunities, and we are always looking for bright new talent to join our team. We currently have an opportunity for a Senior IT Auditor. In this role, you will apply a systematic and disciplined approach to evaluating and improving the effectiveness of technology risk management, cybersecurity, IT operations, and governance across the organization. This position is well suited for an experienced technology auditor with a strong background in cybersecurity audits, IT operational reviews, and large-scale transformation initiatives. Reporting to the Manager, IT, Cyber and Transformation Audit, you will be responsible for executing risk-based technology audits and transformation assurance engagements that provide independent, value-added insights to senior leadership. This role offers broad exposure across the enterprise technology landscape and the opportunity to influence how technology risks are identified, managed, and mitigated.

Key Responsibilities:

Assist the IT Audit Manager in planning, scoping, and executing IT, cybersecurity, and transformation assurance audits, including reviews of: Cybersecurity governance and operations, Cloud environments (IaaS, PaaS, SaaS), Infrastructure and end-user computing, Identity and access management, IT service management and operational processes and major system implementations and digital transformation initiatives Execute risk-based assurance and advisory engagements aligned with the approved annual IT Audit Plan.Assess the design and operating effectiveness of technology and cyber controls using recognized frameworks (e.g., NIST, ISO, COBIT).Identify control gaps, root causes, and emerging risks, and develop practical, business-aligned recommendations.Assist the Manager in preparing clear, concise, and well-supported audit reports, effectively communicating issues, risks, and recommendations to management and senior leadership.Maintain ongoing dialogue with stakeholders throughout the audit lifecycle to ensure transparency and alignment.Perform follow-up and validation of management action plans to confirm timely and effective remediation.Provide independent assurance over large-scale technology and business transformation initiatives, including system implementations, data migrations, and process redesigns.Evaluate project governance, risk management practices, control design, and readiness for go-live and postimplementation.Partner with project teams to identify control and risk considerations early, while maintaining auditor independence.Support Internal Audit leadership in the development and refresh of the annual IT Audit Plan, incorporating emerging technology and cyber risks.Mentor and provide guidance to audit team members on cybersecurity risks, IT operations, and audit methodologies.Demonstrate strong professional judgment, intellectual curiosity, and critical thinking when evaluating complex technology environments.

What You Have to Offer:

Undergraduate degree in Information Systems, Computer Science, IT Management, Cybersecurity, or a related field.CISA designation required.Additional certifications such as CISSP, CISM, CRISC, or CCSP strongly preferred.Minimum of 5 years of progressive experience in Technology Audit, with demonstrated experience in: Cybersecurity auditsIT operational auditsCloud and emerging technology environmentsTransformation or large-scale IT initiatives Strong technical knowledge of Operating systems, databases, and networks, Identity and access management, Cybersecurity controls and monitoring, Cloud architectures and security modelsWorking knowledge of governance and control frameworks including NIST, ISO 27001, COBIT, and ISF.Strong planning, organizational, and project management skills with the ability to manage multiple engagements concurrently.Excellent written and verbal communication skills, with the ability to translate technical issues into clear, actionable business insights.Proven ability to build effective relationships and challenge constructively in a collaborative environment.Ability to lead audit engagements independently while partnering effectively with stakeholders at all levels of the organization. #LI-Hybrid