Lead, Enterprise Risk Management & Quality Assurance

This competition is open to all applicants however; internal applicants will be given priority consideration based on minimum qualifications, or a combination of experience, skills, and abilities before external applicants are considered.

Location - This role is hybrid with a mix of remote and in-person. Work primarily takes place at North Campus, Edmonton.

The Lead, Enterprise Risk Management and Quality Assurance position reports to the Executive Director, Internal Audit (IA) & Enterprise Risk Management (ERM) to support the mandate of delivering a world-class Internal Audit (IA) and Enterprise Risk Management (ERM) Program.

The Internal Audit function reports administratively to the Vice-President University Services and Finance (VP USOF) but functionally into the Board Audit and Risk Committee (BARC). Internal Audit is primarily a governance function but interacts heavily with university management to provide insight and advice as an enabler and strategic partner. The ERM function also aligns administratively under the VP USOF, with regular functional reporting to the President's Executive Committee - Strategic (PEC-S) and BARC. 

This role has two primary accountabilities: the first being the continued development and implementation of the ERM function. The second being the development of a modern Quality Assurance and Improvement Program (QAIP) under the new Global Internal Audit Standards, mapping combined assurance, and leading data analytics/insights efforts as required.

Whereas the Executive Director (ED) provides primary leadership and strategy for the two functions, this role is accountable to the ED for designing, delivering and reporting on both a world class ERM function as well as the design and execution of an overarching QAIP and assurance architecture. In conjunction with the Lead, Internal Audit, the enhancement of data analytics is a critical strategy for the IA&ERM and is a primary accountability of this role.

The organizational structure of IA&ERM is flat, but this role will be responsible for leading and managing 2-3 auditors and/or consultants on specific quality and risk engagements and working cooperatively with other similar institutions and/or external auditors. This role also works directly with executive management as required. 

Enterprise Risk Management

• Lead the change in underlying framework and continued evolution of ERM at the U of A. The focus will be on strategy-to-risk translation, ensuring leadership can take calculated risks to seize opportunities in alignment with the institutional strategic plan (e.g., Shape).
• Work closely with the VP USOF and PEC-S to define risk appetites and operationalize risk thresholds for everyday academic and operational governance for risks that threaten or provide opportunity for the institution as a whole. This includes strategic risk as well as financial, operational, reputational and people (safety) risk.
• Develop risk identification and horizon scanning processes to contextualize risks through their evolution and model multi-year headwinds (e.g., geopolitical shifts, funding models, research security, digital transformation).
• Facilitate co-design risk workshops with academic leaders, researchers, and Deans, leveraging high political acumen and change enablement methodologies.
• Develop effective and consistent risk analysis tools and processes.
• Develop/ Evolve risk reporting and discussion processes.
• Redefine the Terms of Reference for the Enterprise Risk Management Committee (ERMC) to support new ERM processes.
• Facilitate risk discussions at all levels within the institution and with the PEC-S executive team quarterly in conjunction with the Executive Director, IA&ERM.
• Strong written deliverables including reports and dashboards with business relevant information.
• Attend Board Audit & Risk Committee (BARC) and Board of Governors (BOG) meetings with the Executive Director, IA&ERM to present risk reports.
   

QAIP & Assurance Architecture

• Lead the Quality Assurance and Improvement Program (QAIP) under the IIA’s Global Internal Audit Standards, focusing on continuous quality assessment, strategic impact, and audit performance metrics rather than just output volume.
• Architect a Combined Assurance map across the university (management controls, compliance bodies, health & safety, external regulators, internal audit) to identify blind spots and eliminate redundant operational reviews.
• Review internal audit engagements with independence and constructive skepticism, identifying methodology bottlenecks and driving continuous improvement in assurance delivery.
• Lead a team of assurance professionals and consultants to accomplish quality and risk objectives. Provide coaching and development for these staff.
• Support the successful completion of a Quality Assessment Review (QAR) in accordance with the IIA standards. This review of Internal Audit is performed by a third party on a five-year cycle with 2026 being a review year.
• Work to enhance relationships with post-secondary, and related-entity, audit groups. This includes maintaining, enhancing and supporting the expectations outlined in a formal Memorandum of Understanding between post-secondary institutions in Alberta regarding internal audit.
   

Data Analytics & Risk Sensing

• Accountable for the development of Key Risk Indicators (KRIs), dynamic risk sensing, and early-warning institutional metrics through the Institutional Data Analytics (IDA) office who provide ongoing technical expertise and support. These routines will shape internal audit risk assessments, audit plans, and scoping of audits in the future, as well as provide valuable performance and risk data to process owners.
• Synthesize complex risk interdependencies into clear, visual, and concise executive reporting suitable for the Board of Governors’ Audit and Risk Committee, clearly communicating the "so what?" behind the data.
• Ensure approach and process changes to the Internal Audit function are compliant with the International Professional Practices Framework (IPPF) of the Institute of Internal Auditors (IIA).
   

Fraud & Integrity

• Accountable for providing subject matter expertise in enterprise fraud risk assessment, integrity culture, and systemic risk mitigation for consideration in Internal Audit plans and analytics functions.
• Provide this expertise to the Internal Auditor with primary accountability for fraud investigations.
   

Leadership and Employee Engagement

• This position is one of two senior roles in IA&ERM whereby incumbents will be natural proxies and/or successors to the Executive Director. This position will have the most exposure to executive leadership and the board level of the institution in the team.
• Being IA&ERM is a small team with a flat organizational structure, it is critical for this role to provide mentorship and development opportunities (as practicable) to all existing staff to ensure strong skills development across the team.
• Strong interpersonal effectiveness is critical in this role and will serve as an example for team members.
• Assist on departmental initiatives/projects as needed.

• Minimum 10 years progressive experience in enterprise risk management, strategic planning, advisory, or governance/assurance (post-secondary preferred).
• Experience in developing and implementing Enterprise Risk Management programs and facilitating executive-level strategic risk workshops.
• Experience in leading Quality Assurance and Improvement Programs (QAIP) or modernizing assurance methodologies under Global Internal Audit Standards.
• Bachelor's degree in a related field, such as Business, Strategic Management, Public Administration, Computer Science, Information Systems, Human Resources.
• CRMA, CIA,CRM, PMI, or Change Management (e.g., Prosci) certifications preferred.CPA, or MBA are considered strong assets.
• High emotional intelligence (EQ), systems thinking, and political acumen to navigate a decentralized, collegial higher-education environment.
• Competence in the application of internal control frameworks and/or internal audit processes.
• Understands industry-specific and relevant data analytics, business intelligence and quantitative analysis trends, techniques, and leading practices.
• Demonstrated ability to identify and analyze risks, or control weaknesses, and evaluate their impact on business operations.
• Understands internal control frameworks, risk management assessments and governance frameworks.
• Strong project and time management skills; demonstrated ability to manage multiple projects and priorities.
• Must have professional experience managing resources, effective team interactions, providing timely and constructive feedback, negotiating issues and resolving problems.
• Superior verbal and written communications skills.

Application Instructions

Click "Apply Now" to submit your resume and cover letter

This position is excluded from the bargaining unit.

In accordance with the Handbook of Terms and Conditions of Employment for Non-Union Employees, this position has a comprehensive benefits package and an annual salary which will be commensurate with qualifications.