About the role

Principal IT Auditor leading complex, high-risk technology audits at Export Development Canada, a Crown corporation supporting Canadian businesses globally. Advising executives and the Audit Committee on technology risk.

Responsibilities

Lead and deliver complex IT audits from start to finish as engagement lead
Perform hands-on audit work in complex and high-risk areas
Assess risks, evaluate controls, test key processes, and form audit conclusions
Define audit scope and approach for cybersecurity, cloud services, data and privacy, identity and access management, AI, and third-party technology risks
Guide, review, and challenge work performed by Senior Individual Contributors
Develop clear audit findings covering root causes, risk implications, and improvement opportunities
Prepare and present executive-level audit reports, summaries, and presentations for senior management and the Audit Committee
Serve as audit contact for Director- and VP-level stakeholders
Communicate audit objectives, emerging issues, and conclusions
Consider emerging risks, regulatory expectations, and leading industry practices
Identify common themes and systemic issues across audits
Support continuous improvement of IT audit practices, including data analytics and advanced audit techniques
Influence audit quality and capability through mentoring, knowledge sharing, and setting expectations
Provide independent and objective assurance and advisory services
Execute a Quality Assurance and Improvement Program aligned with Global Internal Audit Standards

Bachelor’s degree in information systems, computer science, engineering, or equivalent relevant experience
Minimum of 8–10 years of relevant experience in IT audit, IT risk, cybersecurity, technology governance, or technology assurance
Demonstrated experience leading audits and managing stakeholders at multiple levels
Strong knowledge of modern IT environments including cloud, identity, networks, endpoint security, data platforms, and agile delivery
Working familiarity with NIST, CIS Controls, COBIT, ISO 2700x, and IIA standards
Excellent communication skills to distill complex technical risks into clear, decision-ready insights
Strong organizational and project management skills
Ability to manage multiple priorities and deliver to timelines
Professional certifications such as CISSP, CISM, CRISC, CGEIT, or CISA strongly preferred
Expertise in one or more of cybersecurity, cloud security, identity, data governance, third-party risk, or technology resilience
Hands-on experience with data analytics tools and techniques such as Power BI, ACL/HighBond, IDEA, Python, or SQL
Practical experience with GenAI use cases for audit and appropriate governance
Bilingual French and English is an advantage
Able to work legally in Canada at the time of application; Canadian Citizens or Permanent Residents preferred
Must meet requisite government security screening requirements