Senior IT Auditor, VP Finance

University of Calgary; Calgary; On-site; CAD 90,000 - 120,000; Full time

Job summary

The University of Calgary's University Audit Services within VP Finance seeks a Senior IT Auditor to lead IT assurance engagements and provide independent assurance over IT processes and controls.

Reporting to the IT Audit Manager, you will assess risks in cybersecurity, privacy, cloud platforms, ERP systems, and third-party providers, and present actionable recommendations to management.

Responsibilities

• Lead and execute IT assurance engagements from planning through reporting.
• Assess risks related to cybersecurity, privacy, business continuity, system implementations, and third-party providers.
• Develop risk-based audit programs and test procedures for IT general controls and application controls.
• Evaluate controls across ERP systems, research systems, cloud platforms, and critical infrastructure.
• Prepare clear audit reports and present actionable solutions to Management.

Job description

Description

University Audit Services in VP Finance is currently seeking a Full-time Regular Senior IT Auditor.

Reporting to the IT Audit Manager, the Senior IT Auditor plays a key role in delivering the University's technology audit program. This position is responsible for executing and leading IT audit engagements and providing independent, objective assurance over the effectiveness of IT processes and controls.

Operating within a complex and decentralized academic environment, the Senior IT Auditor will work closely with business and IT stakeholders to identify risks and practical improvements that support organizational objectives. The successful candidate combines strong technical knowledge with business acumen to evaluate both technology and business risks, provide advisory services, and contribute to the continuous improvement of the organization's control environment.

Summary of Key Responsibilities (job functions include but are not limited to):

Technology Audit Delivery (Primary Focus)

• Lead and execute complex IT assurance engagements, from planning through reporting.
• Identify and assess risks related to cybersecurity, privacy, business continuity, system implementations, and third-party providers.
• Develop risk-based audit programs and test procedures to assess IT general controls, application controls, and emerging technology risks using relevant frameworks.
• Evaluate the design, implementation, and operating effectiveness of controls across ERP systems, research systems, cloud platforms, and critical infrastructure.
• Prepare clear, concise audit reports and present actionable solutions to Management.
• Resolve complex audit issues and escalat key risks and control gaps to senior leadership in a timely manner.
• Ensure audit work meets professional standards with high-quality documentation and reporting.
• Build effective working relationships with IT Services, cybersecurity teams, and administrative units

Audit Planning & Risk Assessment

• Support the development and ongoing refinement of the risk-based internal audit plan with a focus on technology risks and digital transformation initiatives.
• Conduct IT risk assessments in emerging risk areas such as Al, cloud computing, and cybersecurity, to inform audit priorities.
• Provide insights into institutional risk exposures and control maturity across IT domains.

Audit Systems, Tools & Innovation

• Support administration of our audit and compliance platforms (e.g., OpsAudit and CrossComply), ensuring effective configuration, data integrity, and usability.
• Maintain and enhance audit tools and systems to support efficient audit execution and stakeholder reporting.
• Collaborate with IT and business to ensure alignment between audit tools, governance frameworks, and institutional systems.

Data Analytics & Continuous Monitoring

• Support the IT Audit Manager in leading the development and application of data analytics to enhance audit coverage, efficiency, and insight generation.
• Analyze large datasets to identify trends, anomalies, and risks, supporting both individual audits and continuous monitoring initiatives.
• Enable and mentor audit staff in the use of data analytics tools and techniques.

Business Intelligence & Reporting

• Support the administration of