Analyst, IT Compliance & Controls

Analyst IT Compliance & Controls Division IT Job location Remote (Canada) Hours 40 hours per week Monday to Friday Employment type Full Time Salary 85-95K A little about us Aurora is proud to be a global leader in the cannabis industry. With a smart strategy unmatched talent and focus on our long-term success we believe we have a bright future. At Aurora we’re passionate about helping patients improve their lives through high-quality premium medical cannabis under brands they can trust and rely on. Our products available across Canada Europe Australia and New Zealand include leading brands like Pedanios IndiMed San Raf Whistler Greybeard and CraftPlant. Our diverse team works passionately across various roles from manufacturing to corporate positions and many more united by our purpose Opening the World to Cannabis . Enabled by science and empowered by people for patients and consumers. We collaborate globally embrace change with courage stay agile and treat everyone with compassion. We live our values daily making a meaningful impact on patients communities and our A-Team.

Job Summary

The Analyst IT Compliance & Controls supports the organization’s IT compliance risk and control environment across Canada Europe and Australia. This role helps coordinate the design implementation documentation monitoring and continuous improvement of IT General Controls (ITGCs) and related technology controls. Working collaboratively across IT and business functions the Analyst partners with IT leadership application and control owners Information Security Internal Audit and external auditors to support SOX compliance regulatory requirements cybersecurity controls and operational risk management. The role also supports control governance across enterprise applications infrastructure cloud environments and ERP systems including control testing audit coordination remediation activities and ongoing improvements to the organization’s IT control framework. Sound Interesting? Here is a little more… As the Analyst IT Compliance & Controls you will… Partner with IT leadership and Business Application Owners to design implement document and operationalize IT General Controls (ITGCs). Serve as a key coordinator for IT control owner activities across multiple technology domains. Ensure assigned controls are executed consistently monitored regularly and supported by appropriate evidence. Develop compensating controls where control deficiencies or vendor assurance gaps exist. Maintain IT control documentation process narratives risk and control matrices and operating procedures. Support continuous improvement of the enterprise IT control framework. Coordinate execution of SOX IT General Controls across enterprise applications infrastructure cloud platforms and security operations. Manage control evidence collection and documentation within ServiceNow GRC. Monitor control performance and identify opportunities to improve effectiveness and efficiency. Partner with Internal Audit and external auditors during planning walkthroughs testing evidence requests and remediation activities. Track audit observations and coordinate remediation activities through successful closure. Collaborate with Business Application Owners to ensure ERP and critical business applications maintain effective security change management and operational controls. Review new applications enhancements system implementations and process changes to ensure compliance requirements are incorporated into solution design. Support ERP governance activities with particular emphasis on financial reporting controls segregation of duties user access management and change management. Experience supporting or administering Sage X3 or similar ERP platforms is highly desirable. You will be setup for success if you have… Bachelor’s degree in Computer Science Information Systems Business Accounting or a related discipline. 7–10 years of progressive experience in IT compliance IT risk SOX compliance IT audit internal controls or IT governance preferably within a publicly traded or highly regulated organization. Demonstrated experience serving as an IT Control Owner Control Coordinator ITGC Program Lead or in a comparable role with accountability for enterprise IT controls. Experience supporting SOX ITGC programs across enterprise applications infrastructure cloud platforms and security operations. Experience supporting enterprise ERP environments preferably Sage X3 experience with SAP Oracle Microsoft Dynamics or comparable platforms is also relevant. Experience using ServiceNow GRC or a comparable Governance Risk and Compliance platform to manage controls evidence testing issues and remediation activities. Experience working with internal and external auditors throughout audit planning walkthroughs testing evidence collection and remediation cycles. Experience supporting system implementations application enhancements or significant technology changes from a risk and controls perspective. Experience working within multi-jurisdictional or global technology environments is preferred. CISA CRISC CIA CISSP or a comparable professional certification is preferred. Big Four public accounting consulting or equivalent IT audit experience is considered an asset.

Bonus Points

if you have… . Knowledge of applicable regulatory privacy cybersecurity and control frameworks including SOX/C-SOX NIST Cybersecurity Framework CIS Controls ISO 27001 PCI-DSS GDPR/PIPEDA and other relevant regulatory requirements. Strong knowledge of IT General Controls (ITGCs) IT risk management internal control principles and technology governance practices Strong analytical and risk assessment skills with the ability to evaluate control design and effectiveness identify gaps and recommend appropriate remediation or compensating controls. Ability to interpret compliance and control requirements and translate them into practical sustainable IT processes and controls. Strong audit coordination skills including the ability to support walkthroughs testing evidence requests issue management and remediation activities. Strong technical writing and documentation skills including the development and maintenance of process narratives risk and control matrices procedures and control evidence. Strong problem-solving and professional judgment when assessing technology risks control deficiencies and remediation options. Ability to communicate complex risk and compliance requirements clearly to both technical and non-technical stakeholders. Strong collaboration and stakeholder management skills with the ability to work effectively across IT Information Security Finance Internal Audit and business functions. Strong organizational and prioritization skills with the ability to manage multiple compliance activities audit requests and remediation initiatives across competing deadlines. High attention to detail and accuracy in control execution documentation evidence management and compliance reporting. Why you’ll love working at Aurora Flexibility you will enjoy a flexible work environment that is the perfect blend of work and fun! You will be empowered to achieve work-life balance with flexible hours remote work options meeting-free-Friday-afternoons and more! Total Rewards we will motivate you to go above and beyond with a competitive salary professional development opportunities company SWAG team activities and modern technology. Team we are a diverse and global team of cannabis enthusiasts energetic innovators fitness gurus caring parents foodies and more with a collective passion to nurture an inclusive environment that helps you grow and provide people better days with cannabis. Next steps Apply today by submitting your resume through our website. Apply today by submitting your resume through our website. You can expect your application to be reviewed by our Talent Acquisition Team and not an AI software/system. We we will contact you if we see a fit via email. Think you’re the ideal candidate but you don’t meet all the requirements? Apply anyways. We would love to review your application to see if you’re the right fit or find you an alternative opportunity. Not the role for you? Share this posting with your network while subscribing to our Talent Community to learn more about upcoming opportunities (hot tip if you are an Aurora employee take advantage of the employee referral program by sharing this posting with someone in your network! If they are the successful candidate you may be eligible for a bonus!). Diversity Equity Inclusion Belonging and Accessibility At Aurora we are proud to foster and celebrate a diverse community of professionals! We take pride in nurturing an inclusive culture that empowers our people to be their authentic selves celebrate their differences and love where they work. Our diverse community combined with our inclusive culture is what sets us apart in the industry and equips our A-Team with superpowers – and this is why we encourage all candidates to apply for job opportunities regardless of race national origin colour religion age gender identity or expression sexual orientation marital and family status disability or any other identifying characteristic. We value the unique skills and experience each person brings to Aurora and are committed to creating and maintaining an accessible environment. We are committed to the requirements of the Accessibility for Ontarians with Disabilities Act so if you require accommodation during the hiring process please let our Human Resources team know by contacting us at hr.services@auroramj.com