Analyst, IT Compliance

Select how often (in days) to receive an alert:

Analyst, IT Compliance & Controls
Division: IT
Job location: Remote (Canada)
Hours: 40 hours per week, Monday to Friday
Employment type: Full Time
Salary: 85-95K

A little about us

At Aurora, we’re passionate about helping patients improve their lives through high-quality premium medical cannabis under brands they can trust and rely on. Our products, available across Canada, Europe, Australia, and New Zealand, include leading brands like Pedanios, IndiMed, San Raf, Whistler, Greybeard and CraftPlant.

Our diverse team works passionately across various roles, from manufacturing to corporate positions, and many more, united by our purpose: Opening the World to Cannabis . Enabled by science and empowered by people, for patients and consumers. We collaborate globally, embrace change with courage, stay agile, and treat everyone with compassion. We live our values daily, making a meaningful impact on patients, communities, and our A-Team.

Job Summary

The Analyst, IT Compliance & Controls supports the organization’s IT compliance, risk, and control environment across Canada, Europe, and Australia. This role helps coordinate the design, implementation, documentation, monitoring, and continuous improvement of IT General Controls (ITGCs) and related technology controls.

Working collaboratively across IT and business functions, the Analyst partners with IT leadership, application and control owners, Information Security, Internal Audit, and external auditors to support SOX compliance, regulatory requirements, cybersecurity controls, and operational risk management.

The role also supports control governance across enterprise applications, infrastructure, cloud environments, and ERP systems, including control testing, audit coordination, remediation activities, and ongoing improvements to the organization’s IT control framework.
Sound Interesting? Here is a little more…

As the Analyst, IT Compliance & Controls you will…

• Partner with IT leadership and Business Application Owners to design, implement, document, and operationalize IT General Controls (ITGCs).
• Serve as a key coordinator for IT control owner activities across multiple technology domains.
• Ensure assigned controls are executed consistently, monitored regularly, and supported by appropriate evidence.
• Develop compensating controls where control deficiencies or vendor assurance gaps exist.
• Maintain IT control documentation, process narratives, risk and control matrices, and operating procedures.
• Support continuous improvement of the enterprise IT control framework.
• Coordinate execution of SOX IT General Controls across enterprise applications, infrastructure, cloud platforms, and security operations.
• Manage control evidence collection and documentation within ServiceNow GRC.
• Monitor control performance and identify opportunities to improve effectiveness and efficiency.
• Partner with Internal Audit and external auditors during planning, walkthroughs, testing, evidence requests, and remediation activities.
• Track audit observations and coordinate remediation activities through successful closure.
• Collaborate with Business Application Owners to ensure ERP and critical business applications maintain effective security, change management, and operational controls.
• Review new applications, enhancements, system implementations, and process changes to ensure compliance requirements are incorporated into solution design.
• Support ERP governance activities, with particular emphasis on financial reporting controls, segregation of duties, user access management, and change management.
• Experience supporting or administering Sage X3 or similar ERP platforms is highly desirable.

You will be setup for success if you have…

• Bachelor’s degree in Computer Science, Information Systems, Business, Accounting, or a related discipline.
• 7–10 years of progressive experience in IT compliance, IT risk, SOX compliance, IT audit, internal controls, or IT governance, preferably within a publicly traded or highly regulated organization.
• Demonstrated experience serving as an IT Control Owner, Control Coordinator, ITGC Program Lead, or in a comparable role with accountability for enterprise IT controls.
• Experience supporting SOX ITGC programs across enterprise applications, infrastructure, cloud platforms, and security operations.
• Experience supporting enterprise ERP environments, preferably Sage X3; experience with SAP, Oracle, Microsoft Dynamics, or comparable platforms is also relevant.
• Experience using ServiceNow GRC or a comparable Governance, Risk and C