Description University Audit Services in
VP Finance is currently seeking a Full-time Regular
Senior IT Auditor.
Reporting to the IT Audit Manager, the Senior IT Auditor plays a key role in delivering the University's technology audit program. This position is responsible for executing and leading IT audit engagements and providing independent, objective assurance over the effectiveness of IT processes and controls.
Operating within a complex and decentralized academic environment, the Senior IT Auditor will work closely with business and IT stakeholders to identify risks and practical improvements that support organizational objectives. The successful candidate combines strong technical knowledge with business acumen to evaluate both technology and business risks, provide advisory services, and contribute to the continuous improvement of the organization's control environment.
Summary of Key Responsibilities (job functions include but are not limited to):
Technology Audit Delivery (Primary Focus)
- Lead and execute complex IT assurance engagements, from planning through reporting.
- Identify and assess risks related to cybersecurity, privacy, business continuity, system implementations, and third-party providers.
- Develop risk-based audit programs and test procedures to assess IT general controls, application controls, and emerging technology risks using relevant frameworks.
- Evaluate the design, implementation, and operating effectiveness of controls across ERP systems, research systems, cloud platforms, and critical infrastructure.
- Prepare clear, concise audit reports and present actionable solutions to Management.
- Resolve complex audit issues and escalate key risks and control gaps to senior leadership in a timely manner.
- Ensure audit work meets professional standards with high-quality documentation and reporting.
- Build effective working relationships with IT Services, cybersecurity teams, and administrative units
Audit Planning & Risk Assessment
- Support the development and ongoing refinement of the risk-based internal audit plan with a focus on technology risks and digital transformation initiatives.
- Conduct IT risk assessments in emerging risk areas such as Al, cloud computing, and cybersecurity, to inform audit priorities.
- Provide insights into institutional risk exposures and control maturity across IT domains.
Audit Systems, Tools & Innovation
- Support administration of our audit and compliance platforms (e.g., OpsAudit and CrossComply), ensuring effective configuration, data integrity, and usability.
- Maintain and enhance audit tools and systems to support efficient audit execution and stakeholder reporting.
- Collaborate with IT and business to ensure alignment between audit tools, governance frameworks, and institutional systems.
Data Analytics & Continuous Monitoring
- Support the IT Audit Manager in leading the development and application of data analytics to enhance audit coverage, efficiency, and insight generation.
- Analyze large datasets to identify trends, anomalies, and risks, supporting both individual audits and continuous monitoring initiatives.
- Enable and mentor audit staff in the use of data analytics tools and techniques.
Business Intelligence & Reporting
- Support the administration of the Internal Audit Power Bl environment, including governance, data models, and reporting assets.
- Design and deliver dashboards and reports that provide meaningful insights into risk, audit results, and performance metrics.
- Communicate findings clearly to technical and non-technical audiences, including senior leadership.
Operational Contributions
- Contribute to the continuous improvement of Internal Audit processes, methodologies, and templates.
- Participate in departmental initiatives, special projects, and cross-functional work as required.
Qualifications / Requirements:Education & Credentials
- Bachelor's degree in Accounting, Information Systems, Computer Science, Information Security, Business Administration, or a related discipline.
- Professional certifications such as CISA, CIA, CISSP, and/or CPA is strongly preferred.
Experience
- Minimum 3-6 years of relevant experience in IT audit, Internal Audit, cybersecurity, or related areas.
- Experience executing IT audits, including testing general and application controls.
- Experience working in complex or decentralized environments (public sector or higher education considered an asset).
Skills & Competencies
- Deep knowledge of IIA Global Internal Audit Standards (GIAS) and IT control frameworks (e.g., COBIT, NIST, ISO 27001, ITIL).
- Strong understanding of cybersecurity, data governance, privacy, and digital risk management.
- Expertise in IT general controls, application controls, and system implementation reviews.
- Advanced analytical and problem-solving skills with experience in data analytics tools (e.g., Power BI, ACL, Python).
- Strong communication skills with the ability to translate technical risk into business impact.
- Proven ability to build relationships and influence stakeholders in a decentralized environment.
- Collaborative team player with strong interpersonal skills.
Application Deadline: October 16, 2026
We would like to thank all applicants in advance for submitting their resumes. Please note, only those candidates chosen to continue on through the selection process will be contacted.
This position is classified in the
Professional Career Band, Level 3 of the Management and Professional Staff Career Framework.
For a listing of all management and staff opportunities at the University of Calgary, view our
Management and Staff Careers website .
