Internal Auditor and Risk Analyst, Project Management Office, BC Health Workday

Internal Auditor and Risk Analyst, Project Management Office, BC Health Workday

Role Summary

In accordance with the Purpose, Vision, Values and Coast Salish Teachings, and strategic directions of PHSA, safety, including both patient and employee safety, is a priority and a responsibility shared by everyone at PHSA. As such, the requirement to continuously improve quality and safety is inherent in all aspects of this position.

The BC Health Workday Program is a provincial initiative with seven participating BC health organizations (FHA, IHA, ISLH, NHA, PHC, PHSA and VCHA). The program began in 2023 to implement a Human Capital Management System (HCMS) software solution as part of the BC Health Human Resources Strategy to transform HR services. Designed by Workday Canada, the new provincial platform will replace existing HR and payroll systems in the health organizations with a single, unified technical system that will standardize and modernize HR and payroll services. It is a significant transformation in BC and is vital to the sustainability of BC’s health system.

Internal Auditor and Risk Analyst is responsible for providing independent, objective assurance and advisory services designed to evaluate and improve the effectiveness of risk management, control, and corporate governance processes throughout the  BC Health Workday Program. 

Reporting to the Manager, Quality, Risk and Issue Management, the Internal Auditor and Risk Analyst is accountable for embedding proactive audit readiness and risk analysis across all program activities and deliverables. This position develops and enforces clear audit-readiness standards, ensures governance artifacts and documentation can withstand independent review, and partners with workstreams and Health Organizations to minimize risk exposure. The Internal Auditor and Risk Analyst strengthens program credibility by planning ahead for audit activities, analyzing emerging risks, and ensuring that effective controls and mitigations are in place.

This role collaborates closely with program governance (e.g., executive committees and operational committees), Finance, Legal/Privacy, Procurement/Vendor Management, and all delivery workstreams. The Internal Auditor and Risk Analyst standardizes audit readiness and risk management practices across implementing and non-implementing Health Organizations, ensuring consistent control expectations, evidence quality, and responsiveness. The role protects program credibility, reduces exposure, and supports timely, confident milestone approvals throughout the BC Health Workday Program.

Key Accountabilities

• Proactively develops, maintains, and manages relationships with program governance bodies, internal workstreams, and Health Organization representatives. Collaborates with management and business teams to strengthen governance, improve internal controls, and enhance risk and assurance practices across the BC Health Workday Program.
• Serves as an educational and advisory resource to program management on risk, audit readiness, and control practices. Provides consulting guidance to support compliance with internal governance standards, IIA Standards, and relevant health-sector best practices.
• Plans and manages audit readiness reviews and related assurance activities within agreed timelines. Identifies and prioritizes operational, performance, and governance risks, issues, and control gaps; evaluates their nature, extent, and impact on the program.
• Meets with program and Health Organization staff to validate audit objectives, test evidence, and confirm that findings are supported. Develops action-oriented recommendations to improve risk management, internal controls, and documentation quality.
• Prepares summaries, reports, and updates for PMO leadership and governance committees. Supports the Manager, Quality, Risk and Issue Management in escalating material findings and recommendations.
• Monitors and follows up on remediation action plans with program and Health Organization leads to ensure risks are closed in a timely manner and that control improvements are embedded.Coordinates and facilitates audit-related activities with other assurance providers, external auditors, and regulators, ensuring efficient coverage and minimal duplication of effort.
• Conducts or assists with special risk reviews and investigations where program vulnerabilities or improprieties are suspected, preparing clear and evidence-based reports of findings.
• Participates in reviews of new and revised program processes, technology solutions, and system conversions to ensure that internal controls are designed effectively, and that data migration or configuration processes are complete and accurate.Collaborates with other functional teams to integrate assurance activities and optimize resource use.
• Identifies opportunities to optimize the internal risk and audit readiness process. Implements improvements to existing approaches and methodologies consistent with IIA Standards, ISACA Standards, and recognized frameworks such as COBIT, NIST, and ISO 27000.
• Communicates, as required, with representatives from Health Organizations, the Ministry of Health, and other provincial oversight bodies (including the Office of the Auditor General and the Office of the Chief Information Officer) regarding best practices, risk management, and internal control matters.

Qualifications

• A level of education, training and experience equivalent to a Bachelor’s Degree in Business Administration, Finance, Risk Management, or a related discipline, as well as professional certification in IT/IS auditing - Certified Information Systems Auditor (CISA). Other certifications such as CIA, CRISC, CISSP, CISM, ISO 27001 Auditor would be beneficial. A minimum of 5 years’ relevant IT audit/assurance experience managing, supervising, and/or executing audit assignments for large, complex entities. Public sector experience would be an asset, as would experience conducting IT and/or privacy audits in a clinical setting and/or workplace investigations in a unionized environment.
• In-depth knowledge of IT control systems, infrastructures, processes, operations, risk management frameworks and best practices. 
• Experience with IT auditing methodologies and tools including risk assessments, controls and governance.
• Strong technical understanding of various IT platforms and evolving technologies including cloud computing, data lakes, big data and agile development methodologies.
• Knowledge of and experience applying internal audit standards, procedures and techniques in accordance with the International Standards for the Professional Practice of Internal Auditing.
• Experience with information systems internal control, risk management and governance frameworks, standards and principles, e.g. COBIT, ITIL, NIST, ISO, PCI DSS, COSO, etc.  
• Applies prevention, disciplined risk analysis, and effective evidence management.
• Strong IT strategic-thinking skills; ability to find innovative, yet practical, strategies to achieve goals, link several strategies into a unified plan, while anticipating needs and maintaining a future focus.
• Critical thinking skills and the ability to make sound judgments in a deadline-oriented environment.
• Demonstrated ability to work independently, be self-motivated, highly organized and exercise professional judgment.
• Strong verbal and written communication skills, ability to present information to a wide variety of end-users and ability to exercise initiative are required. 
• Proven audit planning and project management skills in a multi-assignment environment. 
• Attention to detail but also able to view issues holistically and identify key issues and risks from an organizational perspective. 
• Knowledge of the Institute of Internal Auditor’s Code of Ethics.
• Must be proficient with MS Office; knowledge of automated auditing or GRC software would be an asset.
• Ability to learn new business processes and functions within a short period and provide value-added assessments and recommendations.
• Collaboration skills with a proven track record of partnering with business and driving change and improvement in a business-supportive way. Ability to share knowledge and educate business partners on risk management and internal controls.
• Cross-functional leadership presence and ability to build credibility and trust across the organization. Effective consensus building, conflict resolution, and negotiation skills.
• Demonstrated commitment to continuous learning and continuous improvement within the fields of internal audit, risk management, governance and compliance.

What we bring

Every PHSA employee enables the best possible patient care for our patients and their families. Whether you are providing direct care, conducting research, or making it possible for others to do their work, you impact the lives of British Columbians today and in the future. That’s why we’re focused on your care too – offering health, wellness, development programs to support you – at work and at home.

• Join one of BC’s largest employers with province-wide programs, services and operations – offering vast opportunities for growth, development, and recognition programs that honour the commitment and contribution of all employees.
• Access to professional development opportunities through our in-house training programs, including +2,000 courses, such as our San’yas Indigenous Cultural Safety Training course, or Core Linx for Leadership roles.
• Enjoy a comprehensive benefits package, including municipal pension plan, and psychological health & safety programs and holistic wellness resources.
• Annual statutory holidays (13) with generous vacation entitlement and accruement.
• PHSA is a remote work friendly employer, welcoming flexible work options to support our people (eligibility may vary, depending on position).
• Access to WorkPerks, a premium discount program offering a wide range of local and national discounts on electronics, entertainment, dining, travel, wellness, apparel, and more.

Job Type: Temporary, Full-Time
Wage:  $74,618.00 to $107,264.00
The starting salary for this position would be determined with consideration of the successful candidate’s relevant education and experience and would be in alignment with the provincial compensation reference plan.
Location: 1775 Willingdon Ave, Burnaby BC V5C6E3 (Hybrid)
Closing date: October 31^st, 2025
Hours of Work: 08:30 to 16:30, Mon - Fri
Requisition # HCMS_EE06314

What we do 
The Provincial Health Services Authority (PHSA) plans, manages and evaluates specialized health services with the BC health authorities to provide equitable and cost-effective health care for people throughout the province. Our values reflect our commitment to excellence and include: Respect people – Be compassionate – Dare to innovate – Create equity – Be courageous.  

Learn more about PHSA and our programs: jobs.phsa.ca/programs-and-services

PHSA is committed to anti-racism and equity in our hiring and employment practices. With learning and compassion, we are addressing existing inequities and barriers throughout our systems. PHSA is seeking to create a diverse workforce and to establish an inclusive and culturally safe environment. We invite applications and enquiries from all people, particularly those belonging to the historically, systemically, and/or persistently excluded groups identified under the B.C. Human Rights Code. 

One of PHSA’s North Star priorities is to eradicate Indigenous-specific racism, which includes ongoing commitments to Indigenous recruitment and employee experience as well as dismantling barriers to health care employment at every level. We welcome Indigenous individuals to apply and/or contact the Sanya’k̓ula Team (Indigenous Recruitment & Employee Experience) for support at indigenous.employment@phsa.ca. 

Indigenous-specific anti-racism initiatives are rooted in addressing the unique forms of discrimination, historical and ongoing injustices, and exclusion faced by Indigenous peoples. These initiatives align with an Indigenous rights-based approach, recognizing the inherent rights and title of BC First Nations and self-determination of all First Nations, Inuit and Métis communities. PHSA is mandated to uphold legislative obligations and provincial commitments found in the foundational documents  including the Truth & Reconciliation Commission’s Calls to Action (2015), In Plain Sight (2020), BC's Declaration on the Rights of Indigenous Peoples Act (2019), United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP), Reclaiming Power and Place Missing and Murdered Indigenous Women & Girls Calls for Justice (2019), the Declaration Act Action Plan and Remembering Keegan: A First Nations Case Study. 

ATTN: PHSA Employees:

To be considered as a PHSA employee (internal applicant) for this position, you must apply online via your internal profile at http://internaljobs.phsa.ca  

Please note the internal job posting will no longer be accessible after the expiry date of October 31st, 2025. If the internal job posting has expired, please contact the Internal Jobs Help Desk and advise that you would like to be considered as a late internal applicant for this position. Please do not apply for the external job posting.

If you have not registered your internal profile, a password is required to log in for the first time. To obtain your password, please contact the Internal Jobs Help Desk at 604-875-7264 or 1-855-875-7264. Please note regular business hours are Monday – Friday (excluding stats), 8:30am to 4:30pm. For inquiries outside of regular business hours, please email the Internal Jobs Help Desk at internaljobshelpu@phsa.ca and a Help Desk Representative will contact you the next business day.