On behalf of our public-sector client, Affinity is seeking a Sr. Analyst – Internal Controls (IT) to provide guidance, advisory support, and subject matter expertise to project teams during system implementations and major system changes.

The role supports the design, assessment, testing, and validation of Information Technology General Controls (ITGCs), Information Technology Application Controls (ITACs), and Segregation of Duties (SoD) controls to help ensure compliance with financial reporting, regulatory, and governance requirements, including the CSOX Program. While the primary focus of the role is supporting controls initiatives related to system implementations, additional responsibilities may include ad hoc support for broader CSOX Program activities. Working collaboratively with business process owners, project teams, application administrators, cybersecurity personnel, and internal and external auditors, this role helps promote a strong control setting throughout the system development lifecycle (SDLC) and supports the successful implementation of sustainable and compliant control frameworks.

Responsibilities

- Provide guidance on the design and implementation of ITGCs, ITACs, and SoD controls during system implementations, upgrades, and transformation initiatives.
- Collaborate with project teams to identify key risks and recommend appropriate control activities to mitigate those risks.
- Support the integration of controls into business processes, workflows, and system configurations.
- Review proposed system designs and configurations to identify potential control gaps and compliance risks.
- Assess the design effectiveness of ITGCs, ITACs, automated controls, and SoD controls.
- Support control walkthroughs and documentation reviews to confirm controls are adequately designed and aligned to risks.
- Assist in validating control implementation prior to system go-live.




- Facilitate remediation efforts for identified control deficiencies and track progress through to resolution.
- Assist in the development and execution of SoD risk assessments.
- Support the review of role design, user access models, and security configurations for SoD compliance.
- Identify potential conflicting access and coordinate with stakeholders to evaluate mitigating controls.
- Support the implementation and monitoring of SoD governance processes.
- Participate in ITGC, ITAC, and SoD testing activities to evaluate control operating effectiveness.
- Assist with the development of test procedures and the collection of supporting evidence.
- Support management's compliance activities related to CSOX and other regulatory requirements.
- Maintain appropriate control documentation, risk assessments, and compliance records.
- Contribute to the ongoing evolution of the organization's IT controls framework and methodology.

Qualifications

- Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, Business, or a related discipline.
- CISA (Certified Information Systems Auditor)
- CIA (Certified Internal Auditor)
- CPA (Chartered Professional Accountant)
- CISSP (Certified Information Systems Security Professional)
- CRISC (Certified in Risk and Information Systems Control)
- CISM (Certified Information Security Manager)
- 3 to 7 years of experience in IT controls, IT audit, SOX/CSOX compliance, risk management, cybersecurity governance, or a related field.
- Experience supporting ERP implementations or large-scale system transformation projects.
- Experience evaluating and testing ITGCs, ITACs,



automated controls, and SoD controls.
- Familiarity with ERP environments such as Oracle, SAP, Workday, or other enterprise applications is preferred.
- Seeking a Sr. Analyst – Internal Controls (IT) to support Project Fusion and related system implementation activities.
- Experience with ITGCs, ITACs, SoD, SOX/CSOX compliance, IT audit, or IT risk management.
- Oracle Fusion experience is a significant asset; ERP implementation experience preferred.
- Strong ability to manage multiple priorities in a fast-paced environment.
- Self-starter who can work independently with minimal supervision.
- Strong stakeholder management and communication skills.
- Able to work effectively across business, technology, cybersecurity, audit, compliance, and project teams.
- Preference for candidates located in Calgary.
- Hybrid work arrangement with a requirement to be onsite four days per week.
- Remote candidates may be considered for exceptional candidates.

Affinity Earn Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/ About Affinity Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 13858

📌 Sr. Analyst – Internal Controls (IT) (Calgary)
🏢 Affinity
📍 Calgary