IT Compliance Analyst

CA01 Canopy Growth Corp; Ottawa; Hybrid; CAD 70,000 - 85,000; Full time

Benefits offered by this job

Extended health and dental coverage

Paid vacation

Employer-supported retirement savings

Job summary

Canopy Growth is seeking an IT Compliance professional to strengthen our ICFR/ITGC program and facilitate the integration of acquired subsidiaries into our governance framework. This fully remote role, based in the Ottawa area, collaborates with IT and internal teams to ensure effective controls across our organization.

With at least five years in IT and three in compliance, you will design controls, address gaps, and liaise with external resources.

Qualifications

• University degree in Computer Science or related field.
• Minimum of 5 years of IT experience.
• Minimum of 3 years of compliance experience.
• CISA or similar designation is an asset.
• Strong knowledge of ICFR, ITGC, SOX, GDPR, PCI-DSS, NIST CSF.
• Experience in IT governance, risk and compliance management.
• Excellent communication and collaboration skills.

Responsibilities

• Assist with ITGC and ICFR control processes to ensure compliance.
• Help integrate acquired subsidiaries into ICFR/ITGC program.
• Coordinate with external resources for controls evaluation.
• Work with internal teams to map changes in business processes to core systems.
• Update process documentation reflecting IT environment.
• Assist design of IT general and application controls and validate effectiveness.
• Identify control gaps and work with process owners to remediate.
• Handle special projects as assigned.

Skills

IT governance

Risk management

SOX/ICFR/ITGC

Cybersecurity

Networking concepts

Communication

Regulatory compliance

Collaboration

Education

University degree in Computer Science or related field

Job description

The Company At Canopy Growth, our mission is clear: improve lives, end cannabis prohibition, and strengthen communities. We believe that cannabis can be a force for good. We’re building a consumer-centric organization that is focused on sharing the transformational potential of cannabis with the world. We will achieve this through an innovative and disruptive portfolio of cannabis and hemp-derived products. Canopy Growth is the world's leading cannabis and hemp company. We recognize that employees are at the core of our success, and we take pride in a corporate culture that emphasizes inclusiveness, collaboration, and diversity. Our employees come from a wide range of backgrounds, each bringing their own unique skills and talents to the table, working together to continue our incredible momentum of growth.

Responsibilities

• Assist with the control processes to ensure Canopy’s compliance with ITGC and ICFR.
• Assist in the integration of acquired subsidiaries into Canopy’s ICFR\ITGC program.
• Liaise with external resources as required to facilitate IT controls evaluation.
• Liaise with internal resources as required to understand how changing business process impact core business systems to ensure controls are adequately considered.
• Understand the overall IT environment and appropriately update process documentation.
• Assist with the design of IT general controls and application controls and validate their effectiveness throughout the audit period.
• Assist in identification of controls gaps and collaborate with IT process owners to ensure gaps are appropriately addressed.
• Special projects as assigned.

Position Requirements

• Formal Education & Certification University degree in Computer Science, related discipline, or equivalent experience.
• Minimum of 5 years of IT experience.
• Minimum of 3 years of compliance experience.
• CISA or other relevant security-related designation(s) an asset.
• Knowledge & Experience Significant knowledge of and experience (3+ years) with legal and regulatory compliance standards such as [ICFR, ITGC, SOX, GDPR, PCI-DSS, NIST CSF, etc.
• Experience (3+ years) with IT governance, risk, and compliance management.
• Excellent communication skills and the ability to collaborate effectively with all levels of the organization.
• Knowledge of computer networking concepts and protocols and network security methodologies.
• Knowledge of risk management processes (e.g. methods for assessing and mitigating risk).
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of risk management processes.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Proven verbal, written, presentation and communications skills with all levels of management.

This is a full-time, fully remote position based out of the Ottawa area.

• Benefits – extended health and dental coverage, paid vacation, and participation in our employer-supported retirement savings program

Salary range - $70,000 - $85,000

We welcome and encourage applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. If you require accommodation, please notify your Talent Acquisition Partner. Please note, the chosen applicant will be required to successfully complete background and reference checks.

Recruitment Process: All applications for this role are reviewed manually; no AI-based screening or ranking tools are used. This post is for an existing vacancy.

Canopy Growth is a leading global company committed to bettering lives through cannabis. With a focus on cultivation excellence, quality, trust, innovation and disciplined execution, we are a consumer-centric company serving patients, consumers and partners alike. We believe the best of this industry is still ahead – and we are building the team to lead it there.

Let’s grow together!