IT Compliance Analyst

Job Title
IT Compliance Analyst

- Job Description
About SNDL

SNDL is the largest private sector liquor and cannabis retailer in Canada with retail banners that include Ace Liquor, Wine and Beyond, Liquor Depot, Value Buds, and Spiritleaf. As a licensed cannabis producer and one of the largest vertically integrated cannabis companies in Canada specializing in low-cost biomass sourcing, premium indoor cultivation, product innovation, low-cost manufacturing facilities, and a cannabis brand portfolio that includes Top Leaf, Contraband, Citizen Stash, Sundial Cannabis, Palmetto, Bon Jak, Spiritleaf Selects, Versus Cannabis, Value Buds, Vacay, Grasslands, and Superette. SNDL's investment portfolio seeks to deploy strategic capital through direct and indirect investments and partnerships throughout the global cannabis industry.

About the Role

The focus of this role is ensuring that the organization’s processes, policies and procedures meet the legal and regulatory standards of the industry. The person in this role is familiar with and responsible for successfully executing the relevant laws and regulatory standard requirements related to SOX ITGC and PCI DSS audit programs and supports the teams in meeting these requirements.

Primary Responsibilities
- Review and ensure that the organization’s processes, policies and procedures meet the legal and regulatory standards of the industry (such as PCI DSS, Sarbanes Oxley (SOX)).
- Responsible for effective communication and education of the internal control policies.
- Interpret compliance guidelines and ensure that the business systems and technologies are secure and optimized for compliance.
- Serve as a point of contact for IT-related audits, including external (PCI DSS, SOX) and internal audits.
- Prepare evidence required for audits, keep track of findings and manage the remediation plan until all issues have received a satisfactory resolution.
- Collaborate with various departments to identify and resolve compliance issues.
- Conduct risk assessments, monitor compliance issues, and recommend solutions to maintain compliance.
- Assist with developing and implementing business systems and technology security policies, processes, standards, and compliance education efforts.
- Liaise with external auditors to support internal controls and SOX assessments and discuss any internal audit issues noted.
- Maintain accurate program documentation, from scoping and control documentation to testing evidence and risk assessment.
- Other duties, as assigned by management.

**Requirements**:

- Bachelor’s Degree in Computer Science, Business, Information Systems, Accounting, Information Technology or a related field.
- Relevant certifications such as CISA, CISSP, CRISC, PCI, CISM or CGEIT are preferred.
- Technical Knowledge of the IT best practices, Frameworks, regulatory requirements and laws (COBIT, COSO, SOC 2, PCI DSS, Change management, SOX, ITIL, NIST, ISO).
- Minimum 3 years of accounting, finance and internal system audit experience.
- Experience in conducting risk assessments and monitoring compliance issues.
- Strong communication and presentation skills, with the ability to present ideas in business-friendly and user-friendly language.
- Strong process improvement mindset.
- Keen attention to detail.
- Ability to deal with multiple tasks, prioritize, change quickly and work under pressure.
- Team player, willing to share and play various roles in a collaborative environment.
- Good knowledge of M365, SharePoint, Teams; Experience with security and compliance software is a bonus.
- Self-starter with strong time management, able to work under pressure and meet deadlines.
- Excellent understanding of the company’s goals and objectives.
- Curiosity, enthusiasm, and a passion for technology.

As a valued member of the SNDL team, you will enjoy:
- Competitive total compensation and incentives.- A top-notch extended benefits package including medical, vision, and dental.- An entrepreneurial and innovative environment that fosters growth and continuous learning.

Our Commitment to Diversity & Inclusion:

- Number of Openings
1

Time Type

Full time