Senior IT Auditor ( 12 months contract )

Sobeys; Calgary; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Health and dental benefits

Employee Share Ownership Plan

10% in-store discount

Job summary

Sobeys Inc. is seeking a Senior IT Auditor for a 12‑month contract, located across Sobeys offices in Calgary AB among other sites.

You will assess cybersecurity, IT operations, and governance controls, executing risk-based audits and transformation assurance engagements to provide independent insights to senior leadership. The role reports to the IT, Cyber and Transformation Audit Manager and requires at least 5 years of technology audit experience, CISA certification, and strong knowledge of

Qualifications

• Undergraduate degree in Information Systems, Computer Science, IT Management, Cybersecurity, or related field.
• CISA designation required.
• Certifications such as CISSP, CISM, CRISC, or CCSP strongly preferred.
• Minimum of 5 years of progressive experience in Technology Audit.
• Experience in cybersecurity audits, IT operational audits, cloud environments, and large IT initiatives.
• Strong knowledge of OS, databases, networks, IAM, cybersecurity controls.
• Familiar with governance frameworks (NIST, ISO 27001, COBIT, ISF).
• Strong planning, organizational, and project management skills.
• Excellent written and verbal communication; translate technical to business insights.
• Ability to lead audit engagements independently with stakeholders.

Responsibilities

• Assist IT Audit Manager in planning, scoping, and executing IT, cybersecurity, and transformation audits.
• Execute risk-based assurance engagements aligned with the IT Audit Plan.
• Assess design and operating effectiveness of technology controls per frameworks.
• Identify gaps, root causes, and actionable recommendations.
• Prepare clear audit reports and communicate issues to leadership.
• Maintain dialogue with stakeholders throughout audit lifecycle.
• Perform follow-up on management action plans to ensure remediation.
• Provide independent assurance over large-scale technology and transformation initiatives.
• Evaluate project governance, risk management, and go-live readiness.
• Partner with project teams to identify control and risk considerations early.
• Support development of annual IT Audit Plan and refresh of cyber risk coverage.
• Mentor audit team on cybersecurity risks and methodologies.
• Demonstrate professional judgment and critical thinking in complex environments.

Skills

Cybersecurity audits

IT operational audits

Cloud environments

Transformation initiatives

Stakeholder communication

Project management

Audit leadership

Relationship building

Education

Bachelor's degree in Information Systems / Computer Science / IT Management / Cybersecurity

CISA designation

CISSP / CISM / CRISC / CCSP certifications (preferred)

Tools

NIST

ISO 27001

COBIT

ISF

Job description

Embark on a rewarding career with Sobeys Inc., celebrated among Canada’s Top 100 employers where your unique contributions drive success.

Sobeys is full of exciting opportunities, and we are always looking for bright new talent to join our team. We currently have an 12 months contract opportunity for a Senior IT Auditor. This role can be based out of our offices located in Mississauga; ON, Stellarton, Dartmouth; NS, Calgary. AB

In this role, you will apply a systematic and disciplined approach to evaluating and improving the effectiveness of technology risk management, cybersecurity, IT operations, and governance across the organization. This position is well suited for an experienced technology auditor with a strong background in cybersecurity audits, IT operational reviews, and large-scale transformation initiatives.

Reporting to the Manager, IT, Cyber and Transformation Audit, you will be responsible for executing risk-based technology audits and transformation assurance engagements that provide independent, value-added insights to senior leadership. This role offers broad exposure across the enterprise technology landscape and the opportunity to influence how technology risks are identified, managed, and mitigated.

Key Responsibilities

• Assist the IT Audit Manager in planning, scoping, and executing IT, cybersecurity, and transformation assurance audits, including reviews of: Cybersecurity governance and operations, Cloud environments (IaaS, PaaS, SaaS), Infrastructure and end-user computing, Identity and access management, IT service management and operational processes and major system implementations and digital transformation initiatives
• Execute risk-based assurance and advisory engagements aligned with the approved annual IT Audit Plan.
• Assess the design and operating effectiveness of technology and cyber controls using recognized frameworks (e.g., NIST, ISO, COBIT).
• Identify control gaps, root causes, and emerging risks, and develop practical, business-aligned recommendations.
• Assist the Manager in preparing clear, concise, and well-supported audit reports, effectively communicating issues, risks, and recommendations to management and senior leadership.
• Maintain ongoing dialogue with stakeholders throughout the audit lifecycle to ensure transparency and alignment.
• Perform follow-up and validation of management action plans to confirm timely and effective remediation.
• Provide independent assurance over large-scale technology and business transformation initiatives, including system implementations, data migrations, and process redesigns.
• Evaluate project governance, risk management practices, control design, and readiness for go-live and postimplementation.
• Partner with project teams to identify control and risk considerations early, while maintaining auditor independence.
• Support Internal Audit leadership in the development and refresh of the annual IT Audit Plan, incorporating emerging technology and cyber risks.
• Mentor and provide guidance to audit team members on cybersecurity risks, IT operations, and audit methodologies.
• Demonstrate strong professional judgment, intellectual curiosity, and critical thinking when evaluating complex technology environments.

What You Have to Offer

• Undergraduate degree in Information Systems, Computer Science, IT Management, Cybersecurity, or a related field.
• CISA designation required.
• Additional certifications such as CISSP, CISM, CRISC, or CCSP strongly preferred.
• Minimum of 5 years of progressive experience in Technology Audit, with demonstrated experience in:
• Cybersecurity audits
• IT operational audits
• Cloud and emerging technology environments
• Transformation or large-scale IT initiatives
• Strong technical knowledge of Operating systems, databases, and networks, Identity and access management, Cybersecurity controls and monitoring, Cloud architectures and security models
• Working knowledge of governance and control frameworks including NIST, ISO 27001, COBIT, and ISF.
• Strong planning, organizational, and project management skills with the ability to manage multiple engagements concurrently.
• Excellent written and verbal communication skills, with the ability to translate technical issues into clear, actionable business insights.
• Proven ability to build effective relationships and challenge constructively in a collaborative environment.
• Ability to lead audit engagements independently while partnering effectively with stakeholders at all levels of the organization.

Who We Are

Sobeys is one of Canada’s leading grocery retailers, with more than 1,600 stores across all 10 provinces and banners including Sobeys, Safeway, IGA, Foodland, FreshCo, Thrifty Foods, and Lawtons Drug Stores. Our 128,000 teammates and franchise affiliates are passionate about delivering great food and exceptional experiences to our customers and communities.

Learn More About Our Story And Culture

Who We Are | Why Work With Us

Total Rewards

We offer a Total Rewards package designed to support teammates at work and in life. Depending on role and eligibility, teammates may receive health and dental benefits, retirement and savings programs including an Employee Share Ownership Plan, a 10% in-store discount at participating banners, virtual healthcare and an Employee and Family Assistance Program, learning and development opportunities, parental leave top-up, and paid vacation.

Sobeys is committed to providing a compensation structure that is flexible, equitable and competitive in the market to enable performance and growth. Individual compensation is determined based on qualifications, experience, and internal equity within the range provided.

Additional Information

External websites may share our organization's job postings which includes compensation information based on similar roles and market benchmarks. These figures are provided for general comparison purposes only and are not issued or verified by our organization.

We may use Artificial Intelligence (AI) tools to support efficiencies in the candidate screening, assessment, and recruitment processes. These AI tools do not make hiring decisions on behalf of the Company. Hiring decisions are made by our Hiring Teams.

Sobeys is committed to creating accessible and inclusive hiring processes. We will work with applicants requesting accommodation at any stage of the recruitment process.

Please note: Successful candidates will be required to provide documentation to prove their legal ability to work in the position during the onboarding process. Documentation will be assessed by the employer prior to commencement of work.