Manager, IT Audits

Liberty; Joplin (MO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K with 5% match

Annual bonus eligibility

Life insurance & disability

Tuition reimbursement

EAP & Headspace

Vacation & holidays

Certification reimbursement

Job summary

Algonquin Power & Utilities Corp. (AQN), parent company of Liberty, seeks an experienced Manager, IT Audit to lead risk-based IT audits across enterprise systems, customer-facing apps, and critical infrastructure.

The role provides independent assurance to senior management and the Audit Committee on governance, cybersecurity, data privacy, and controls. You will collaborate with IT, cybersecurity, operations, and compliance teams to enhance risk maturity, oversee remediation, and align with

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Cybersecurity, Business Administration, or a related field.
• 8+ years of progressive IT audit, information security, IT risk management, or related experience; at least 3 years in a supervisory or lead capacity.
• Experience auditing complex enterprise IT environments including ERP, network, cloud, database, and cybersecurity controls.
• Experience in the utility, energy, or critical infrastructure sector is preferred, including exposure to OT/ICS environments.
• Working knowledge of NERC CIP, SOX, NIST, COBIT, and ISO 27001 frameworks.
• Experience with data analytics tools (SQL, ACL/Galvanize, Power BI, Python) is a plus.
• Preferred credentials: CISA, CISSP, CIA, CPA, CRISC, CISM, GICSP, or similar.

Responsibilities

• Develop and maintain the annual risk-based IT audit plan covering IT general controls, application controls, cybersecurity, cloud services, third‑party vendors, and OT/ICS environments.
• Lead audits from planning through reporting, including scoping, risk/control matrix development, testing, evaluation, and workpaper review.
• Evaluate controls over critical utility systems such as customer information, billing, AMI, outage management, asset management, and financial systems.
• Ensure compliance with regulatory standards including NERC CIP, SOX 404, NIST CSF, NIST 800‑53, ISO 27001.
• Review IT project and system implementation activities including SDLC, change management, data conversion, post-implementation reviews.
• Use data analytics and continuous auditing to improve coverage and insight.
• Prepare clear audit reports with risks, root causes, and actionable recommendations.

Skills

IT audit

IT risk management

information security

data analytics

leadership

project management

Education

Bachelor's degree in Information Systems/CS/Accounting/Cybersecurity/BA

Tools

SQL

ACL/Galvanize

Power BI

Python

Job description

Algonquin Power & Utilities Corp. (AQN), parent company of Liberty, is a diversified international generation, transmission, and distribution utility. AQN is committed to providing safe, reliable, and cost-effective energy and water solutions through our portfolio of utility investments to over one million customer connections, largely in the United States and Canada.

At Algonquin, our vision is to be the most trusted utility service provider in North America – a premium regulated utility, known for our customer focus, commitment to sustainability, and strong community partnerships. Our employees are at the heart of that vision. We believe that when people are empowered to learn, grow, and contribute their ideas, we can achieve remarkable results together.

We are building a culture that values integrity, inclusivity, and innovation. By joining Algonquin, you’ll be part of a team that is shaping the future of energy and water, while creating long‑term value for our customers, communities, employees, and shareholders.

Purpose

The Manager, IT Audit leads the planning and execution of risk‑based information technology and operational technology (OT) audits across the company’s enterprise systems, customer‑facing applications, and critical infrastructure. This position provides independent and objective assurance to senior management, the Audit Committee, and the Board of Directors on the effectiveness of IT governance, cybersecurity, data privacy, system development, and technology controls. The Manager also supports the company’s compliance with applicable regulatory and reliability standards. The role will work collaboratively with our IT teams to develop the IT risk and audit universe to implement a risk‑based IT audit strategy aligned with the organization’s objectives and strategic pillars.

Accountabilities

• Develop and maintain the annual risk‑based IT audit plan, including assessments of IT general controls, application controls, cybersecurity, cloud services, third‑party vendors, and OT/ICS environments (e.g., SCADA, energy management, and distribution management systems).
• Lead audits from planning through reporting, including scoping, risk and control matrix development, testing, evaluation of results, and workpaper review.
• Evaluate controls over critical utility systems such as customer information and billing, advanced metering infrastructure (AMI), outage management, asset management, work management, and financial systems.
• Assess compliance with NERC CIP, SOX 404, NIST Cybersecurity Framework, NIST 800‑53, ISO 27001, and other applicable regulatory and industry standards.
• Review IT project and system implementation activities, including system development life cycle, change management, data conversion, and post‑implementation reviews.
• Use data analytics and continuous auditing techniques to improve audit coverage, efficiency, and insight.
• Prepare clear, concise, and well‑supported audit reports that communicate risks, root causes, and actionable recommendations to management and the Audit Committee.
• Build collaborative relationships with IT, cybersecurity, operations, engineering, compliance, and business leaders while maintaining independence and objectivity.
• Track and validate remediation of audit findings and report on the status of open issues.
• Coordinate with external auditors, regulators, and third‑party assessors to leverage work and avoid duplication of effort.
• Advise management on emerging technology, cyber, and regulatory risks affecting the utility industry.
• Maintain and enhance IT audit methodologies, tools, templates, and quality assurance practices in conformance with the Institute of Internal Auditors (IIA) Global Internal Audit Standards and ISACA standards.
• Promote a culture of continuous learning, professional certification, and technical skill development within the audit team.
• Support special projects, investigations, and management requests assigned by the Director, Internal Audit.

Education and Experience

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Cybersecurity, Business Administration, or a related field required.
• A minimum of 8 years of progressive experience in IT audit, information security, IT risk management, or a related field, including at least 3 years in a supervisory or lead capacity.
• Experience auditing complex enterprise IT environments, including ERP, network, cloud, database, and cybersecurity controls.
• Experience in the utility, energy, or other critical infrastructure industry strongly preferred, including exposure to OT/ICS environments.
• Working knowledge of NERC CIP, SOX, NIST, COBIT, and ISO 27001 frameworks.
• Experience with data analytics tools (e.g., SQL, ACL/Galvanize, Power BI, Python) is a plus.
• Recommended: One or more of the following – Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Global Industrial Cyber Security Professional (GICSP), or similar credentials.

What We Offer

• Medical, Dental, and Vision coverage & a 401K plan with a 5% match, effective day one
• Annual bonus and merit increase eligibility
• Life insurance and short‑term & long‑term disability
• Employee Stock Purchase Program
• Free Employee Assistance Program & Headspace account
• 3 weeks of vacation, paid sick days, 12 paid company holidays, & 3 paid volunteer days
• Tuition reimbursement, professional development opportunities, & reimbursement for certification costs
• Reward & recognition programs, service awards, a great company culture, and a collaborative & flexible work environment

Our purpose is sustaining energy and water for life, and it is demonstrated in everything we do as a business and as an employee team.

As the successful candidate

Our Mission

We provide safe, secure, reliable, cost‑effective and sustainable energy and water solutions. Our mission is how we create value as an organization—it is what drives us every day to fulfill our purpose.

Our Vision

We better the lives of our customers and communities. Our vision is what we see as possible. It's where we aspire to be, what we want to achieve and how we'll make an impact. It guides and keeps us on the right path as we work towards fulfilling our purposes.

Our Guiding Principles

• Customer Centric
• Integrity
• Entrepreneurial
• Teamwork
• Owner mindset
• Outcome focused
• Continuous learning

We are focused on building a diverse and inclusive workforce. If you are excited about this role and are not confident you meet all the qualification requirements, we encourage you to apply to investigate the opportunity further.

We are an equal opportunity employer and value each person's unique background, diversity, experiences, perspectives and talents.

Full participation of all employees in a safe, healthy and respectful environment is key to individual and company success. We are committed to fully utilizing the abilities of all our employees and expect each of our employees to honour this commitment in their daily responsibilities.