Senior IT Internal Controls Auditor

Job Summary

Role and Responsibilities

• Plan and perform SOX and IT controls testing, including walkthroughs, evidence review, sample selection, and test execution.
• Evaluate the design and operating effectiveness of internal controls over key IT systems.
• Review control evidence for completeness, accuracy, timeliness, and alignment with defined control requirements.
• Document test procedures, results, exceptions, and conclusions in accordance with Internal Audit standards.
• Identify, document, and communicate control exceptions, deficiencies, and potential gaps in control design or operation.
• Support walkthroughs with control owners to confirm process understanding, validate key control activities, and assess control design.
• Maintain and update risk and control matrices, narratives, and testing documentation based on process or control changes.
• Track remediation activities and perform follow-up testing to validate corrective actions.
• Coordinate with IT control owners and external auditors to support SOX testing, audit requests, and reliance procedures.

Qualifications and Education Requirements

• Bachelor’s degree in Information Technology, Accounting, Finance, or a related field.
• Minimum of 5 years of experience in IT internal audit, SOX compliance, or a related controls-focused role.
• Professional certification such as CISA, CISM, CRISC, CIA, or equivalent is preferred.
• Strong understanding of internal control frameworks, including SOX, COSO, COBIT, and risk-based audit methodologies.
• Experience with IT audit testing, including ITGCs, ITACs, and system implementation or SDLC audits.
• Ability to identify control deficiencies, assess risk, and develop practical remediation recommendations.
• Strong documentation skills, including the ability to prepare clear workpapers, narratives, control matrices, and audit findings.
• Advanced proficiency in Microsoft Office, particularly Excel, Word, Outlook, and PowerPoint.
• Experience with audit management, SOX, data analytics, or ERP systems is preferred.
• Cybersecurity audit experience, including knowledge of NIST, ISO 27001, or other security frameworks, is a strong asset.
• Excellent verbal and written communication skills, with the ability to work effectively with stakeholders across countries and functions.
• Strong analytical, organizational, and project management skills, with the ability to manage multiple priorities and meet deadlines.
• Flexibility to collaborate across time zones, with occasional travel within Europe as needed.
• Tilray welcomes applications from all qualified individuals and is committed to employment equity and diversity in the workplace.
• Accommodations are available for applicants with disabilities throughout the recruitment process. If you require accommodations for interviews or other meetings, please advise when submitting your application.
• Please note that Tilray does not authorize, engage, or sponsor any consultants, agencies or organizations that seek certain personal or financial information from you (e.g. passwords, login ids, credit card information). Tilray does not charge any application, processing or onboarding fee at any stage of the recruitment or hiring process.
• Tilray does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to Tilray or any of its subsidiaries, directly or indirectly, will be considered Tilray Brands, Inc. property. Tilray will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for engaged services to submit resumes.