Job Description

Our family of 131,000 employees and franchise affiliates share a collective passion for delivering exceptional shopping experiences and amazing food to all our customers. Our mission is to nurture the things that make life better - great experiences, families, communities, and our employees. We are a family nurturing families.

A proudly Canadian company, we started in a small town in Nova Scotia but we are now in communities of all sizes across this great country. With over 1,600 stores in all 10 provinces, you may know us as Sobeys, Safeway, IGA, Foodland, FreshCo, Thrifty Foods, Lawtons Drug Stores or another of our great banners but we are all one extended family.

Ready to Make an impact?

Reporting to the Manager, IT Audit, you will be accountable for the execution of the annual IT audit plan through assurance and advisory work. The Senior Auditor will also support the delivery of the annual IT General Controls plan in support of the 52-109 CEO/CFO Certification program. The role o\xef\xac\x80ers a unique opportunity to work with a broad scope in a team environment, where the participation and value-add from each member is key to the success of the Internal Audit function. You will bring a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes over Information Technology.

*This is a 6-month contract position starting ASAP

Here\'s where you\'ll be focusing:

IT Audit:

• Assist the IT Audit Manager in planning of IT Audit engagements, including reviews of IT processes, applications, infrastructure, projects, and risks assessments according to the annual audit plan
• Work closely with the IT Audit Manager, to execute risk-based audits and advisory engagements in a broad variety of IT processes and projects
• Prepare formal audit/review reports and communicate audit findings and recommendations clearly and concisely
• Assist the IT Audit Manager with regular follow up with action owners to ensure management\'s timely completion of the remediation action plans
• Assist Internal Audit management with the development of the annual IT audit plan including input from audit work, IT leadership, and emerging technology risks
• Mentor Internal Audit teammates on technology risks and controls
• An eagerness to learn and apply critical thinking related to IT processes and applications, existing and emerging risks, testing of controls, and identifying areas of opportunity

52-109 CEO/CFO Certification ITGC program:

• Support the IT Audit Manager in delivering, according to plan, the 52-109 CEO/CFO Certification ITGC program, working with key stakeholders to evaluate the design and operating effectiveness of IT General Controls over Financial Reporting
• Review ITGC test procedures to ensure control objectives and deficiencies identified are clear and concise
• Execute ITGC testing, according to plan, working closely with IT Audit Manager
• Work collaboratively with Management in their development of action plans to address root causes of ITGC deficiencies and improve effectiveness of controls
• Assist the IT Audit Manager with regular follow up with action plan owners to ensure management\'s timely completion of remedial action plans
• Assist the IT Audit Manager with the preparation of quarterly reports on plan progress and deficiency updates to IT leadership
• Collaborate with external auditors, as needed

#LI-Hybrid

What you have to offer:

• Undergraduate degree in an Information Technology related field such as IT Systems, Computer Science, IT Management or Data Analytics.
• Certified Information Systems Auditor (CISA) designation preferred. The preferred candidate may also have one or more of the following designations: CIA, CISSP, CISM or CPA
• Minimum 3 years of experience including management roles in IT Audit, IT consulting practice and/or technology, with a strong risk-based audit foundation
• Strong technical knowledge of IT platforms, operating systems, network services, security, privacy and business applications
• Knowledge of Audit assurance, governance and control frameworks including COBIT, ISF, NIST and ISO,
• Knowledge of Regulations including 52-109, PCI, PIPEDA, GDPR
• Knowledge of Service Organization Controls (SOC) Reporting standards preferred (e.g. CSAE 3416, Section 5025, AT 101) to interpret and apply IT risk and control concepts
• Experience auditing large enterprise IT implementations with knowledge of project methodologies, risks and controls
• Demonstrate strong planning, project management and organizational skills
• Excellent interpersonal skills with strong verbal and written communication
• Ability to present complex information clearly and influence the outcome through effective verbal and written communication
• Good interpersonal skills and ability to cultivate strong working relationships in a team environment is a must
• Strong problem-solving skills with demonstrated creative, innovative and critical thinking

We offer teammates competitive total compensation packages that will vary by role and location. Some websites share our job opportunities and may provide salary estimates without our knowledge. These estimates are based on similar jobs and postings for general comparison, but these numbers are not provided by or monitored for accuracy by our organization. We look forward to discussing the specific compensation details relevant to this role with candidates who are selected to move forward in the recruitment process.

Sobeys is committed to accommodating applicants with disabilities throughout the hiring process and will work with applicants requesting accommodation at any stage of this process.

While all responses are appreciated only those being considered for interviews will be acknowledged.

We appreciate the interest from the Staffing industry however respectfully request no calls or unsolicited resumes from Agencies.

Sobeys