C-Sox Auditor

C-SOX Auditor

• Pay Rate: $67.70/hour, depending on experience
• Contract Length: 5 Months
• Location:
  
  Calgary, Alberta

Raise is currently hiring a C-SOX Auditor on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our client is responsible for the safe and reliable operation of the Alberta Interconnected Electric System.

Note:

The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

Description

The C-SOX Auditor reports to the Lead Auditor, Internal Audit, who reports to the Director, Internal Audit. The Director, Internal Audit reports functionally to the Audit Committee of the Board and administratively to the Vice-President, Finance and Compliance. This reporting structure ensures the independence and objectivity of the Internal Audit Function.

The C-SOX auditor provides independent, risk-based, and objective assurance over the organizations

Internal Controls Over Financial Reporting (ICFR) for its annual C-SOX audit, with a focus on business controls (non-IT controls).

Responsibilities

• Assess and document the design, implementation and operating effectiveness of ’s C-SOX controls for the 2026 audit period, including entity-level controls, expenditures, capital, payroll, operating reserves, revenue and settlements, credit, treasury, financial close and reporting, including relevant automated controls.
• For each control, prepare complete design assessment documentation that clearly identifies:
  • The financial reporting risk and relevant financial statement assertion.
  • The control objective and how the control addresses the identified risk.
  • The control owner and individuals responsible for performing and reviewing the control.
  • Whether the control is preventive or detective, and manual, automated or IT-dependent.
  • The control frequency, timing, precision, thresholds and level of aggregation.
  • The reports, data, systems and other information used in performing the control.
  • The evidence retained to demonstrate performance and review.
  • The criteria used to conclude whether the control is appropriately designed.
  • Any control-design gaps, recommendations and management responses.
  • Confirm that each control has been implemented through inquiry, observation, inspection of supporting evidence and walkthroughs. Document the transaction selected for the walkthrough from initiation through processing, recording and financial reporting.
• Develop and document an operating-effectiveness testing plan for each control, including:
  • Defined population and audit period.
  • Population completeness and accuracy procedures.
  • Sampling methodology and sample-size rationale.
  • Items selected and selection method.
  • Attributes and criteria tested.
  • Evidence inspected.
  • Test results and exceptions identified.
  • Additional or extended testing performed.
  • Final conclusion on operating effectiveness.
• Coordinate with the IT auditor on IT change testing to ensure significant changes during the test period impacting business control design are included in the IT change testing. If exceptions are noted in the completeness, accuracy and validity of information produced, coordinate recommendation(s) with the IT auditor to address control deficiencies
• Prepare work papers that meet methodology and applicable IIA standards and contain sufficient, reliable, relevant and useful evidence so that an experienced auditor with no previous connection to the work can understand and reperform the procedures and reach the same conclusion.
• Cross-reference all risks, controls, procedures, samples, supporting evidence, exceptions and conclusions to the C-SOX risk and control matrix and supporting work papers.
• Identify and document all exceptions, including the nature, cause, frequency, affected population, financial reporting risk and potential magnitude. Assess whether exceptions represent isolated errors or control exceptions in accordance
• with assessment ratings.
• Discuss potential exceptions with the control performer, the Lead Auditor and control owner, while maintaining Internal Audit’s independent assessment…