Manager, IT Audits

Algonquin Power & Utilities Corp.; Joplin (MO); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, and Vision coverage

401K with 5% match

Annual bonus and merit increase

Life insurance and disability

Employee Stock Purchase Program

Headspace account

Flexible work environment

Job summary

LU Service Corp. is seeking a Manager, IT Audits to lead risk-based IT and OT audits across enterprise systems, customer-facing applications, and critical infrastructure.

You will provide independent assurance to senior management and the Audit Committee on governance, cybersecurity, data privacy, and technology controls. The role partners with IT, cybersecurity, operations, and compliance teams, driving risk-based audit strategy aligned with objectives.

Qualifications

• Bachelor's degree required in information systems, CS, accounting, cybersecurity, or related field.
• 8+ years in IT audit, IT risk, or info security with at least 3 years in a lead role.
• Experience auditing complex enterprise IT environments and OT/ICS exposure is a plus.

Responsibilities

• Develop and maintain annual risk-based IT audit plan covering IT general controls, applications, cybersecurity, cloud, and OT/ICS environments.
• Lead audits from planning to reporting including scoping, risk/control matrices, testing, and workpaper review.
• Evaluate controls over customer information, billing, AMI, outages, asset/work management, and financial systems.
• Assess compliance with NERC CIP, SOX, NIST, COBIT, ISO 27001, and other standards.
• Review IT project and system implementation activities including SDLC, change management, and data conversion.
• Use data analytics to improve audit coverage and insight.
• Prepare clear audit reports with root-cause analysis and recommendations.

Skills

IT audit leadership

Cybersecurity controls

Data analytics

Regulatory compliance

Vendor management

Education

Bachelor's degree in Information Systems or related field

Tools

SQL

ACL/Galvanize

Power BI

Python

Job description

Manager, IT Audits

LU Service Corp.

Algonquin Power & Utilities Corp. (AQN), parent company of Liberty, is a diversified international generation, transmission, and distribution utility. AQN is committed to providing safe, reliable, and cost-effective energy and water solutions through our portfolio of utility investments to over one million customer connections, largely in the United States and Canada.

At Algonquin, our vision is to be the most trusted utility service provider in North America – a premium regulated utility, known for our customer focus, commitment to sustainability, and strong community partnerships. Our employees are at the heart of that vision. We believe that when people are empowered to learn, grow, and contribute their ideas, we can achieve remarkable results together.

We are building a culture that values integrity, inclusivity, and innovation. By joining Algonquin, you’ll be part of a team that is shaping the future of energy and water, while creating long-term value for our customers, communities, employees, and shareholders.

Purpose

The Manager, IT Audit leads the planning and execution of risk-based information technology and operational technology (OT) audits across the company's enterprise systems, customer-facing applications, and critical infrastructure. This position provides independent and objective assurance to senior management, the Audit Committee, and the Board of Directors on the effectiveness of IT governance, cybersecurity, data privacy, system development, and technology controls. The Manager also supports the company's compliance with applicable regulatory and reliability standards.The role will work collaboratively with our IT teams to develop the IT risk and audit universe to implement a risk-based IT audit strategy aligned with the organization's objectives and strategic pillars.

Accountabilities

• Develop and maintain the annual risk-based IT audit plan, including assessments of IT general controls, application controls, cybersecurity, cloud services, third-party vendors, and OT/ICS environments (e.g., SCADA, energy management, and distribution management systems).
• Lead audits from planning through reporting, including scoping, risk and control matrix development, testing, evaluation of results, and workpaper review.
• Evaluate controls over critical utility systems such as customer information and billing, advanced metering infrastructure (AMI), outage management, asset management, work management, and financial systems.
• Assess compliance with NERC CIP, SOX 404, NIST Cybersecurity Framework, NIST 800-53, ISO 27001, and other applicable regulatory and industry standards.
• Review IT project and system implementation activities, including system development life cycle, change management, data conversion, and post-implementation reviews.
• Use data analytics and continuous auditing techniques to improve audit coverage, efficiency, and insight.
• Prepare clear, concise, and well-supported audit reports that communicate risks, root causes, and actionable recommendations to management and the Audit Committee.
• Build collaborative relationships with IT, cybersecurity, operations, engineering, compliance, and business leaders while maintaining independence and objectivity.
• Track and validate remediation of audit findings and report on the status of open issues.
• Coordinate with external auditors, regulators, and third-party assessors to leverage work and avoid duplication of effort.
• Advise management on emerging technology, cyber, and regulatory risks affecting the utility industry.
• Maintain and enhance IT audit methodologies, tools, templates, and quality assurance practices in conformance with the Institute of Internal Auditors (IIA) Global Internal Audit Standards and ISACA standards.
• Promote a culture of continuous learning, professional certification, and technical skill development within the audit team.
• Support special projects, investigations, and management requests assigned by the Director, Internal Audit.

Education and Experience

• Bachelor's degree in Information Systems, Computer Science, Accounting, Cybersecurity, Business Administration, or a related field required.
• A minimum of 8 years of progressive experience in IT audit, information security, IT risk management, or a related field, including at least 3 years in a supervisory or lead capacity.
• Experience auditing complex enterprise IT environments, including ERP, network, cloud, database, and cybersecurity controls.
• Experience in the utility, energy, or other critical infrastructure industry strongly preferred, including exposure to OT/ICS environments.
• Working knowledge of NERC CIP, SOX, NIST, COBIT, and ISO 27001 frameworks.
• Experience with data analytics tools (e.g., SQL, ACL/Galvanize, Power BI, Python) is a plus.
• Recommended: One or more of the following – Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Global Industrial Cyber Security Professional (GICSP), or similar credentials.

What We Offer

As a valued member of our team, you will enjoy competitive pay that reflects your skills and experience. You will also have access to a comprehensive benefits package that includes:

• Medical, Dental, and Vision coverage & a 401K plan with a 5% match, effective day one
• Annual bonus and merit increase eligibility
• Life insurance and short-term & long-term disability
• Employee Stock Purchase Program
• Free Employee Assistance Program & Headspace account
• Reward & recognition programs, service awards, a great company culture, and a collaborative & flexible work environment

Our purpose is sustaining energy and water for life, and it is demonstrated in everything we do as a business and as an employee team.

As the successful candidate

Our Mission

We provide safe, secure, reliable, cost-effective and sustainable energy and water solutions. Our mission is how we create value as an organization—it is what drives us every day to fulfill our purpose.

Our Vision

We better the lives of our customers and communities. Our vision is what we see as possible. It's where we aspire to be, what we want to achieve and how we'll make animpact. It guides and keeps us on the right path as we work towards fulfilling our purposes.

• Customer Centric
• Integrity
• Teamwork
• Outcome focused
• Continuous learning

We are an equal opportunity employer and value each person's unique background, diversity, experiences, perspectives and talents.

Full participation of all employees in a safe, healthy and respectful environment is key to individual and company success. We are committed to fully utilizing the abilities of all our employees and expect each of our employees to honour this commitment in their daily responsibilities.