1

Governance Risk Compliance Jobs in Alberta (NOW HIRING)

Ensure all project contracts are aligned with lender due diligence requirements * Assist with financial close and funding processes 6. Governance, Risk & Compliance * Establish and maintain internal ...

Establish and mature governance, risk management, compliance, and data privacy programs. * Lead enterprise AI governance and emerging technology risk management initiatives. * Drive technology ...

Job Summary We are looking for a Senior Analyst - IT Security with a strong focus on Governance, Risk, and Compliance (GRC) to support our efforts in maintaining ISO 27001 certification and other ...

Showing results 21-40

Governance Risk Compliance information

See Alberta salary details

$35K

$110.9K

$178K

How much do governance risk compliance jobs pay per year?

As of Aug 7, 2026, the average yearly pay for governance risk compliance in Alberta is $110,894.00, according to ZipRecruiter salary data. Most workers in this role earn between $81,000.00 and $136,500.00 per year, depending on experience, location, and employer.

What are jobs in governance risk compliance?

Governance risk compliance (GRC) is a method for managing and strategizing an organization's regulations regarding governance, financial or physical risk, and regulatory compliance. It aligns the IT aspects with business objectives and works to improve the efficiency of a company. There are GRC consultants and GRC analysts who provide an assessment of a business’s GRC, identify risks, analyze the data, develop policies to benefit the workplace, and consult on the best choice of action. Your duties may involve optimizing GRC systems, implementing tactics to lower risk, providing internal audits, assisting with cybersecurity, creating routine reports, and ensuring regulatory compliance.

What is the work of governance risk compliance?

Governance, Risk, and Compliance (GRC) professionals develop and implement policies to ensure organizations adhere to legal and regulatory requirements, manage risks, and maintain ethical standards. They analyze business processes, conduct audits, and use tools like risk management software to identify vulnerabilities and ensure compliance across departments.

What is governance risk compliance?

Governance, Risk, and Compliance (GRC) is a coordinated strategy that organizations use to manage overall governance, enterprise risk management, and compliance with regulations and standards. GRC professionals help organizations align their business objectives with risk management practices and regulatory requirements. This role involves identifying potential risks, implementing policies to mitigate those risks, and ensuring that the organization adheres to legal, ethical, and internal standards. Effective GRC management can improve decision-making, optimize processes, and protect the organization from financial or reputational harm.

How does a governance risk compliance professional typically collaborate with other departments within an organization?

GRC professionals work closely with a variety of departments, including IT, legal, finance, and operations, to ensure that organizational policies and regulatory requirements are consistently met. Collaboration often involves leading risk assessments, facilitating compliance training, and coordinating audits to identify and mitigate potential risks. Effective communication and relationship-building are key, as GRC teams must translate complex regulations into actionable steps for different business units. This cross-functional approach helps embed a culture of compliance and risk awareness throughout the organization.

What is the difference between Governance Risk Compliance vs Risk Analyst?

AspectGovernance Risk ComplianceRisk Analyst
CertificationsCRISC, CISA, CISSPCFA, FRM, CRISC
Work EnvironmentCorporate, regulated industriesFinancial, consulting firms
Employer & Industry UsageFinancial institutions, healthcare, governmentBanking, investment firms, insurance

Governance Risk Compliance focuses on establishing policies, ensuring regulatory adherence, and managing enterprise-wide risks. Risk Analysts primarily assess specific financial or operational risks through data analysis. While both roles involve risk management, Governance Risk Compliance has a broader scope related to organizational compliance and governance frameworks, whereas Risk Analysts concentrate on analyzing and quantifying particular risks.

What are the key skills and qualifications needed to thrive as a governance risk compliance professional?

To thrive as a Governance Risk Compliance professional, you need a solid understanding of regulatory frameworks, risk management principles, and policy development, often supported by a degree in business, law, or information security. Familiarity with GRC software platforms, compliance management systems, and certifications like CISA, CRISC, or CISSP is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills set top performers apart in this field. These competencies are essential for ensuring organizational compliance, minimizing risks, and maintaining robust corporate governance.
What job categories do people searching Governance Risk Compliance jobs in Alberta look for? The top searched job categories for Governance Risk Compliance jobs in Alberta are:
Infographic showing various Governance Risk Compliance job openings in Alberta as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 11% Part Time, and 4% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution, with an average salary of $110,894 per year, or $53.3 per hour.

Internal Audit, Control and Enterprise Risk Auditor/Senior Auditor

Gibson Energy

Calgary, AB • On-site

Full-time

Medical, Dental, Vision, Life

Posted 25 days ago


Job description

Internal Audit, Control and Enterprise Risk Auditor/Senior Auditor
Location: Calgary Head Office 
Job status: Full Time Permanent
Department:Governance, Enterprise Risk and Assurance 

Is this position safety sensitive: No 

Apply today! Application Deadline is July 31, 2026 at 11:59pm

At Gibson, we believe our competitive advantage lies in the strength and talents of our employees. That means connecting our employees to rewarding careers, building a high-performance culture where collaboration and creativity are rewarded, and providing real growth opportunities for employees to take on new challenges.  

The Role 

The Internal Audit, Controls and Enterprise Risk Auditor/Senior Auditor reports directly to the Senior Manager of Internal Audit, Controls and Enterprise Risk ("Senior Manager"). This role is responsible for planning, executing and supporting the organization's governance, risk management and internal audit activities to support obligations to the C-Suite and the Audit Committee of the Board of Directors. The position advances the company's objectives by assessing the adequacy and operational effectiveness of internal controls across multiple governance programs, including the CSOX compliance, Internal Audit, and Enterprise Risk Management ("ERM") programs.  

What You Will Do

The Auditor/Senior Auditor works closely with business leaders to assess risks, strengthen internal controls and promote continuous improvement, while ensuring compliance with regulatory requirements (NI 52-109) and corporate governance expectations. Key responsibilities include:  

  • Leading the ICFR (CSOX) program by developing and maintaining process documentation (narratives and flowcharts), preparing initial planning and scoping and risk assessments, performing and reviewing walk-throughs, testing internal controls, and reporting findings to the Senior Manager.
  • Leading and executing internal audit engagements, including developing and performing detailed audit procedures, evaluating the adequacy and effectiveness of processes, operating systems, and internal controls, reviewing audit work papers, and preparing documentation in accordance with the standards set by the Institute of Internal Auditors (IIA) Professional Practices Framework.
  • Tracking and validating the implementation of management action plans from prior audit engagements.
  • Providing advisory support on policy development, process enhancements, and control design to strengthen governance and risk mitigation practices.
  • Building and maintaining strong, collaborative relationships with Corporate and Business Unit leadership, including senior management.
  • Maintaining a high level of integrity, professionalism and confidentiality.
  • Supporting the overall goals of the team and organization by performing other duties as assigned.  

What You Bring to the Role 

  • Minimum of one (1) of either CPA Professional Accounting or CIA Internal Audit designation is required.
  • Additional audit-related designations (CISA, CFE, etc.) are considered assets.
  • Minimum 4-7 year(s)  internal audit and controls-related work experience required.
  • Public accounting or audit firm experience is considered an asset.
  • Previous experience with CSOX (or SOX) compliance programs would be considered an asset.
  • Strong interpersonal skills with the ability to work collaboratively across teams and build effective relationships.
  • Strong business analytical skills including process mapping, process improvement and root cause analysis.
  • Excellent written and verbal communication skills, with the ability to translate complex concepts into clear, concise messages for stakeholders.
  • Firm understanding of the standards under the IIA Professional Practises Framework and the COSO internal control framework.
  • Demonstrates initiative, strong organisational skills and the ability to work independently in a fast-paced environment, while managing multiple priorities.
  • Strong data analytic skills would be considered an asset.
  • Understanding of controls relating to IT systems and databases is an asset. 

Working Conditions 

  • Work is primarily performed in an office environment.  
  • This position may be required to travel to other Gibson offices across Canada and the U.S..
  • This job is subject to background checks as outlined in Gibson Energy's Background Checks policy. Background checks may include: employment history verification, reference checks, education and/or credentials verification, credit check and a criminal history check.

Why You'll Love Working at Gibson 

For over 70 years, Gibson has been defined by our people - those who seize opportunities and make exceptional customer service a part of everything we do. Working at Gibson is an opportunity to be part of a place where employees feel valued, supported and motivated to do their best work. Here's what sets us apart: 

  • A competitive Total Rewards packagethat truly values your contributions. 
  • Employer contributions to your DC Pensionbecause we believe in your future. 
  • Comprehensive health, dental & vision benefits, with industryleadingcoverage for mental health and family planning - ensuring you and your loved ones thrive. 
  • Generous time offto rest, recharge and live life to the fullest.
  • An incredible work environment and culturewhere your career development and advancement are prioritized every step of the way. 

Gibson Energy Inc. ("Gibson" or the "Company") is a diversified North American energy infrastructure company headquartered in Calgary, Alberta. They have significant terminal assets, including 25 million barrels of storage and over 300 miles (500 kilometres) of crude pipelines across North America. The company has been providing market access to the oil and gas industry for over 70 years and is publicly traded on the Toronto Stock Exchange (TSX:GEI) with a market capitalization of approximately $4 billion. 

Gibson Energy operates through two main segments: 

  1. Infrastructure: This includes terminals, marine loading, rail loading and unloading facilities, gathering pipelines, a diluent recovery unit, and a crude oil processing facility. Key facilities within this segment include the Hardisty, Edmonton, and Ingleside Terminals, as well as gathering pipelines in the United States and a crude oil processing facility in Moose Jaw, Saskatchewan. 
  2. Marketing: This involves the purchasing, selling, storing, and optimizing of hydrocarbon products. 

Gibson Energy has a strong presence in the United States, due to the acquisition of the Gateway Terminal in Ingleside, Texas. This terminal is a world-class liquids terminal and export facility with very large crude carrier (VLCC) capabilities and direct pipeline connections to key basins like the Permian and Eagle Ford. The acquisition strengthens Gibson's cash flow with over 95% of the revenue under take-or-pay contracts with high-quality counterparties. 

Our Values, The Gibson Way 

The Gibson Way is how we succeed together. We believe in the power of both 'We' (collectively working together) and "I" (contributing individually) to achieve our shared goals. 

The 'We & I' play a very important role in our success! 

  • Contribute & Add Value Everyday 
  • Keep Our Edge & Be Resilient 
  • Stay Focused & Open-Minded 
  • Work it Out & Do it Together 

This is what we are all about and we encourage you to learn more! Click Here:The Gibson Way  

Still Interested and Don't Meet Every Single Requirement?
We are dedicated to build an authentic and motivating workforce composed of individuals with diverse identities, so if you're excited about this role but your past experience doesn't align perfectly with every skill or education requirement described above, we encourage you to apply anyways. You may be just the right candidate for this or other roles.

For more information, visit www.gibsonenergy.com.