Internal Audit and Advisory Risk Services

The government authority in Calgary, Alberta seeks a qualified vendor to provide internal audit and advisory risk services for a one-year contract period. The internal audit function will operate as an independent and objective assurance and advisory service, providing risk-based insights to strengthen governance, risk management, compliance, operational effectiveness, and organizational performance.

Services are expected to align with Travel Alberta’s strategic objectives, enterprise risks, regulatory obligations, and evolving business environment, while following the Institute of Internal Auditors’ Standards and leading practices. Potential activities include developing and annually refreshing a risk-based rolling three-year internal audit plan; conducting assurance and advisory engagements involving governance, enterprise risk management, compliance, operations, information technology, cloud environments, cybersecurity, privacy, information management, data governance, artificial intelligence governance, marketing and digital performance, and third-party risk management; and preparing engagement work plans that define objectives, scope, resources, budgets, and timelines.

The vendor will execute engagements in accordance with professional standards, independently assess governance, risk management, compliance, and control frameworks, and provide practical, risk-informed recommendations supporting continuous improvement and organizational maturity. Questions must be submitted by September 10, 2026.