IT Audit Program Manager

Division: Compliance, Risk & Assurance
Job location: Remote (Ontario, Quebec, Alberta)
Hours: 40 hours per week, Monday to Friday
Employment type: Full Time Permanent

A little about us

Hi, we’re Aurora Cannabis, and we’re so excited to meet you

Aurora Cannabis is a leader in the rapidly evolving global cannabis industry, serving both medical and consumer markets worldwide. Dedicated to helping people improve their lives, Aurora is driven by science and innovation, with a focus on providing premium medical cannabis products produced with the highest standards. We proudly serve both patients and consumers across Canada, Europe, Australia and New Zealand. Our global brand portfolio includes Aurora, Being, CanniMed, CraftPlant, Daily Special, Drift, Greybeard, IndiMed, MedReleaf, Pedanios, San Raf, Tasty’s, Whistler Cannabis Co, and WMMC. Aurora's brands continue to break through as industry leaders in the medical, wellness and adult recreational markets wherever they are launched.

At Aurora, employees are at the heart of everything we do as we execute with excellence and agility. Whether in our manufacturing facilities, in our state‑of‑the‑art research labs or supporting our global business development, or, within our corporate functions such as HR, operations, government affairs, and more – our diverse A‑Team leads with expertise, passion and dedication every day. Together, we are opening the world to cannabis and making a meaningful impact for patients, consumers, our communities and our A‑team.

Job Summary

The IT Audit Program Manager is a key leader within Aurora’s Compliance, Risk, and Assurance team. This role is responsible for directing the planning, execution, and continuous improvement of the IT General Controls (ITGC) and Application Controls programs that support Aurora’s Sarbanes‑Oxley Act (SOX) compliance. The position ensures that the company’s IT control environment remains effective, efficient, and responsive to changing risks, technologies, and regulatory requirements.

The IT Audit Program Manager oversees the full lifecycle of IT control testing, including scoping, risk assessment, key control identification, testing, and remediation advice for management. The role partners closely with IT Compliance, Finance, and Operations teams to properly scope and test the organization’s IT control framework. It also provides strategic oversight of external auditors and co‑source providers to ensure the quality and timeliness of testing and reporting.

This position requires strong leadership, technical expertise, and sound judgment to identify emerging risks, improve control maturity, and support audit readiness across the organization. The IT Audit Program Manager contributes to the broader compliance and governance strategy by driving accountability, promoting transparency, and aligning IT control objectives with business goals.

As the IT Audit Program Manager you will be involved in …

- Lead the IT General Control audit planning, scoping and coordination of the SOX compliance program, including scoping, risk assessments, control design, testing and remediation

- Partner with internal stakeholders and help navigate through change management and identify design changes to IT General Controls and IT Application Controls.

- Work closely with external auditors, ensuring effective coordination and facilitating efficient testing of controls

- Manage co‑source providers to ensure timely completion of IT General Controls testing within budget

- Analyze findings, observations and draw appropriate conclusions based on both technical guidance and professional judgment, including identification of control gaps and constructive recommendations for remediation

- Identify opportunities for improved scoping, control rationalization, and optimization to streamline processes while maintaining compliance.

- Build strong working relationships with management and control owners to support an effective control environment and compliance

- Collaborate with IT, technology, and business teams to assess the impact of system or process changes on all controls, maintaining their effectiveness throughout business and technology transformations

- Advise on control implications of new systems, infrastructure changes, and technology transformations, ensuring sustainable control design.

- Deliver clear, concise, and actionable reporting to senior leadership, summarizing key findings, emerging risks, and areas for improvement.

- Support automation, optimization, and integration of controls through digital tools and GRC platforms (e.g., AuditBoard, Workiva, ServiceNow).

- Provide mentorship, coaching, and oversight to control owners to elevate audit readiness and compliance awareness.

- Represent the Compliance, Risk, and Assurance team in strategic discussions, audits, and governance forums.

Qualifications

- Deep understanding of SOX Section 404, IT General Controls, and IT Application Controls across multiple technology platforms.

- Strong knowledge of risk management, control frameworks (COSO, COBIT), and IT compliance methodologies.

- Proven ability to lead large‑scale audit programs, manage complex stakeholder relationships, and drive alignment between IT and business objectives.

- Exceptional analytical and problem‑solving skills with the ability to translate technical risks into practical business recommendations.

- Demonstrated ability to manage multiple priorities with discipline, organization, and strategic foresight.

- Experience driving automation, process efficiency, and control optimization initiatives within a regulated environment.

- Proven ability to work collaboratively with cross‑functional teams and external auditors and build trust quickly.

- Strong project management and communication skills, with the ability to drive compliance initiatives.

- Demonstrated ability to efficiently navigate deficiency mitigation efforts, ensuring timely and effective remediation.

- Experience refining, optimizing and automating the existing control environment while maintaining compliance.

- Proven ability to communicate technical risks and control concepts to non‑technical stakeholders.

- Self‑motivated and exercises sound business acumen with a high level of autonomy.

- Excellent organizational skills and attention to detail.

- Strong analytical and problem‑solving skills with the ability to identify control deficiencies, assess risks, and recommend practical solutions.

- Proven ability to foster collaboration across IT, business, and technology teams to support effective control environments.

- Strong judgment and decision‑making skills with the ability to apply professional skepticism and evaluate competing priorities.

- Capacity to drive process improvements through control rationalization, risk‑based scoping, and compliance optimization.

- Ability to adapt to organizational and technological change, ensuring controls remain effective through transformation initiatives.

- Availability to travel within and outside of Canada, on occasion.

Bonus Points

- Proven ability to design and implement financial strategies that enhance profitability, operational performance, and long‑term value creation.

- Exceptional analytical and conceptual thinking skills, with a focus on connecting operational metrics to financial outcomes.

- Strong working knowledge of international accounting standards (IFRS and/or US GAAP), financial governance frameworks, and audit processes.

- High level of business and commercial acumen, with the ability to challenge assumptions and influence strategic decisions at the executive level.

- Excellent communication and presentation skills, with the ability to convey complex financial information clearly and persuasively to non‑financial stakeholders.

- Track record of successful leadership in a matrixed global organization, including building alignment across diverse teams and cultures.

- Experience leading change management efforts, including process reengineering and system transformation.

- Demonstrated ability to lead, mentor, and inspire high‑performing teams to achieve stretch goals and professional growth.

- Strong organizational capability to manage competing priorities, multiple projects, and tight deadlines under pressure.

- Exceptional attention to detail and commitment to accuracy and compliance in all aspects of financial management.

- Skilled in financial modeling, forecasting, and performance measurement tools.

Why you’ll love working at Aurora

- Flexibility: you will enjoy a flexible work environment that is the perfect blend of work and fun You will be empowered to achieve work‑life balance with flexible hours, remote work options, meeting‑free Friday afternoons and more

- Total Rewards: we will motivate you to go above and beyond with a competitive salary, professional development opportunities, company SWAG, team activities and modern technology.

- Team: we are a diverse and global team of cannabis enthusiasts, energetic innovators, fitness gurus, caring parents, foodies and more, with a collective passion to nurture an inclusive environment that helps you grow and provide people better days with cannabis.

Next steps

Apply today by submitting your resume through our website. You can expect your application to be reviewed by our Talent Acquisition Team and we will contact you if we see a fit via email.

Think you’re the ideal candidate but you don’t meet all the requirements? Apply anyways. We would love to review your application to see if you’re the right fit or find you an alternative opportunity. Not the role for you? Share this posting with your network while subscribing to our Talent Community to learn more about upcoming opportunities (hot tip: if you are an Aurora employee, take advantage of the employee referral program by sharing this posting with someone in your network If they are the successful candidate, you may be eligible for a bonus).

Diversity and inclusion

At Aurora, we are proud to foster and celebrate a diverse community of professionals We take pride in nurturing an inclusive culture that empowers our people to be their authentic selves, celebrate their differences and love where they work.

Our diverse community combined with our inclusive culture, is what sets us apart in the industry and equips our A‑Team with superpowers – and this is why, we encourage all candidates to apply for job opportunities regardless of race, national origin, colour, religion, age, gender identity or expression, sexual orientation, marital and family status, disability, or any other identifying characteristic. If you require accommodation (including, but not limited to, an accessible interview site or alternate format of job posting) during the recruitment and selection process, please do not hesitate to let our team know

#J-18808-Ljbffr