Senior IT Auditor

• Test ITGCs end to end across all in-scope platforms covering logical access and user provisioning/de-provisioning privileged/administrative access segregation of duties change management and batch job scheduling related controls.
• Test ITACs (IT Application Controls) including reports/IPEs access restrictions configurations/validations/calculations and interfaces.
• Own the full test lifecycle from planning scope conducting walkthroughs and assessing design and operating effectiveness through building and executing test plans.
• Evaluate and conclude on deficiencies by assessing severity (deficiency significant deficiency material weakness) articulating the impact on financial reporting and supporting findings with clear traceable documentation.
• Work with IT control and process owners to validate observations agree on root cause develop practical remediation plans or compensating controls and perform follow-up and retesting to confirm issues are sustainably addressed.
• Communicate findings risk and recommendations to IT Finance and senior leadership in clear business-relevant language.
• Serve as a key liaison to Nutriens external auditors by coordinating walkthroughs aligning on scope timing and evidence and resolving differing views constructively to reduce duplication across the SOX cycle.
• Advise on control design for new and changing processes systems and technologies identifying and documenting key IT controls before they go live.
• Contribute to continuous improvement of the IT SOX program including risk assessment refresh control rationalization and use of automation/analytics in testing.
• Identify and assess risk associated with Nutriens Information Technology (IT) environment.
• Evaluate the security reliability integrity and governance of the IT environment and application systems across all platforms utilized by Nutriens in-scope business units.

• CISA certification (Certified Information Systems Auditor) is required. Candidates actively pursuing CISA or holding equivalent audit certifications such as CPA CA CIA CRISC CISA CISM or CISSP are also encouraged to apply.
• Bachelors degree in information systems Computer Science Accounting Business or a related field.
• 6 years of IT SOX ITGC and ITAC testing or IT governance risk and controls experience ideally within or serving large public (SEC/CSA-registered) companies.
• Big 4 or large national/public-company IT audit background strongly preferred (Deloitte PwC EY KPMG or comparable).
• Deep hands-on command of IT risk and control frameworks including COSO COBIT and SOX/PCAOB requirements.
• Proven end-to-end controls testing experience. Youve scoped tested and concluded independently not just supported.
• Strong evidence-based writing and the ability to work self-directed with limited supervision while meeting firm deadlines.
• Unwavering attention to detail professional skepticism and integrity.
• Hands-on experience with large ERPs such as SAP (S/4HANA a plus) and Oracle EBS including security roles and configurable controls. (Preferred)

What Success Looks Like in Your First Year

• You independently plan and complete assigned ITGC and ITAC testing across multiple platforms with minimal rework.
• Control owners view you as tough but fair: findings are accurate well-supported and paired with practical remediation.
• Youve started contributing ideas to strengthen the IT SOX program and improve testing efficiency.