JOB SUMMARY:

Reporting to the Manager, IT Internal Audit, the Senior IT Auditor is responsible for planning and executing IT audit engagements in alignment with departmental standards and regulatory requirements. This role supports the evaluation and enhancement of internal controls over financial reporting (ICFR), IT governance, and compliance frameworks.

QUALIFICATIONS, SKILLS AND EDUCATION REQUIREMENTS:

• Professional designation required: CISA or CIA.
• Minimum 5 years of experience in IT audit, including ITGC testing and system implementation controls.
• CPA (CMA, CGA, or CA) designation is a strong asset.
• Experience with operational audits and data analytics is preferred.
• Strong knowledge of ICFR (NI 52-109), IFRS, COSO, and COBIT frameworks.
• Hands-on experience with SOX Section 404 compliance.
• Proficiency in internal audit standards and methodologies.
• Advanced skills in Microsoft Office (Word, Excel, Outlook, PowerPoint).
• Excellent verbal and written communication skills.
• Strong analytical, organizational, and planning abilities.
• Ability to document and implement new procedures and drive organizational change.
• Comfortable working remotely with occasional travel.
• Experience with AuditBoard and operational audit tools is a plus.
• Familiarity with AI tools, robotic process automation (RPA), or machine learning applications in auditing is highly desirable.
• Cybersecurity audit experience, including knowledge of NIST, ISO 27001, or other security frameworks, is a strong asset.
  Tilray welcomes applications from all qualified individuals and is committed to employment equity and diversity in the workplace.
  Accommodations are available for applicants with disabilities throughout the recruitment process. If you require accommodations for interviews or other meetings, please advise when submitting your application.
  Please note that Tilray does not authorize, engage, or sponsor any consultants, agencies or organizations that seek certain personal or financial information from you (e.g. passwords, login ids, credit card information). Tilray does not charge any application, processing or onboarding fee at any stage of the recruitment or hiring process. When replying to emails, please ensure the sender name and email address match exactly. Please also ensure the Reply-To address matches the sending address exactly

• Plan and conduct audit fieldwork, including scheduling interviews, requesting documentation, and communicating findings.
• Execute risk and control matrix (RCM) assessments:
• Assist in scoping and scalability evaluations.
• Categorize controls based on risk nature.
• Perform walkthroughs with process and control owners.
• Document control gaps and remediation plans.
• Monitor and follow up on remediation progress.
• Update RCMs to reflect changes in controls or processes.
• Maintain ownership of assigned audit file sections, ensuring completeness and accuracy.
• Contribute to recommendations for improving IT and business processes related to ICFR, COSO, and COBIT frameworks.
• Track and report on self-assessments, testing results, and remediation activities.
• Ensure audit documentation (digital and physical) adheres to departmental standards.
• Draft audit reports with practical, well-considered recommendations suitable for Executive Management and the Board.
• Provide regular updates on audit progress and escalate issues as needed.
• Build and maintain effective relationships with internal and external audit stakeholders.
• Leverage AI tools and automation to enhance audit efficiency, data analysis, and control testing. Experience with AI-driven audit platforms or automation tools is a strong plus.
• Experience performing cybersecurity audits is a plus, including assessments of security controls, incident response processes, and compliance with cybersecurity frameworks.