IT Internal Controls Auditor

Tilray Brands, Inc.; Toronto; Hybrid; CAD 60,000 - 75,000; Full time

Benefits offered by this job

Vacation Time & Paid Personal Time Off

Employee & Family Assistance Program

Growth and Internal Mobility Opportuni

Job summary

Tilray Brands, Inc. in Toronto is seeking an IT Internal Controls Auditor to support IT audit engagements, perform walkthroughs, test control design and operating effectiveness, and document testing results.

You will work with Senior IT Auditors, IT owners, and external auditors to ensure timely, accurate control testing across the company. The role emphasizes SOX testing, risk assessment, and remediation tracking within a hybrid Toronto office; travel within Canada may be required.

Qualifications

• Bachelor’s degree in Information Technology, Accounting, Finance, or related field.
• 3+ years of IT internal audit, SOX compliance, or similar controls-focused experience.
• Professional certification such as CISA, CISM, CRISC, CIA is preferred.
• Strong understanding of SOX, COSO, COBIT frameworks and risk-based audit methods.
• Experience with ITGCs/ITACs and SDLC audits.
• Excellent documentation and communication skills.

Responsibilities

• Perform SOX and IT controls testing, including walkthroughs, evidence review, sample selection, and test execution.
• Evaluate design and operating effectiveness of IT controls across key systems.
• Review control evidence for completeness, accuracy, and timeliness.
• Document test procedures, results, and conclusions per Internal Audit standards.
• Identify, document, and communicate control deficiencies and remediation needs.
• Coordinate walkthroughs with control owners to validate processes.
• Maintain risk and control matrices, narratives, and testing docs.
• Track remediation activities and perform follow-up testing.

Skills

SOX compliance

IT controls testing

Documentation skills

Stakeholder communication

Risk assessment

Project management

Time zone coordination

Education

Bachelor’s degree in Information Technology, Accounting, Finance, or related field

CISA/CISM/CRISC/CIA certification preferred

Tools

Microsoft Excel

Microsoft Word

PowerPoint

Outlook

Job description

_ About Tilray Brands, Inc. _

_ Tilray Brands, Inc. _(“Tilray”) (Nasdaq: TLRY; TSX: TLRY), is leading global lifestyle and consumer packaged goods companywith operations in Canada, the United States, Europe, Australia, and Latin America that is leading as a transformative force at the nexus of cannabis, beverage, wellness, and entertainment, elevating lives through moments of connection. Tilray’s mission is to be a leading premium lifestyle company with a house of brands and innovative products that inspire joy,wellnessand create memorable experiences. Tilray’s unprecedented platform supports over 40 brands in over 20 countries, including comprehensive cannabis offerings, hemp-based foods, and craft beverages.

Status

This posting is for an existing vacancy, covering a parental leave.

Employee Type

Open-ended contract.

Work Location

Toronto office; hybrid.

Job Summary

Reporting to the Manager, Internal Audit, the IT Internal Controls Auditor is responsible for supporting the execution of IT audit engagements in alignment with departmental standards and regulatory requirements. This role will execute walkthroughs, review control evidence, test the design and operating effectiveness of IT controls, document testing results, and identify exceptions or control deficiencies. The position will work closely with the Senior IT Auditors, control owners from IT Business Applications, IT Operations, and external auditors to support timely, accurate, and well-documented control testing across the Company’s operations.

Role and Responsibilities

• Perform SOX and IT controls testing, including walkthroughs, evidence review, sample selection, and test execution.
• Evaluate the design and operating effectiveness of internal controls over key IT systems.
• Review control evidence for completeness, accuracy, timeliness, and alignment with defined control requirements.
• Document test procedures, results, exceptions, and conclusions in accordance with Internal Audit standards.
• Identify, document, and communicate control exceptions, deficiencies, and potential gaps in control design or operation.
• Support walkthroughs with control owners to confirm process understanding, validate key control activities, and assess control design.
• Maintain and update risk and control matrices, narratives, and testing documentation based on process or control changes.
• Track remediation activities and perform follow-up testing to validate corrective actions.
• Coordinate with IT control owners and external auditors to support SOX testing, audit requests, and reliance procedures.

Qualifications and Educations Requirements

• Bachelor’s degree in Information Technology, Accounting, Finance, or a related field.
• Minimum of 3 years of experience in IT internal audit, SOX compliance, or a related controls-focused role.
• Professional certification such as CISA, CISM, CRISC, CIA, or equivalent is preferred.
• Strong understanding of internal control frameworks, including SOX, COSO, COBIT, and risk-based audit methodologies.
• Experience with IT audit testing, including ITGCs, ITACs, and system implementation or SDLC audits.
• Ability to identify control deficiencies, assess risk, and develop practical remediation recommendations.
• Strong documentation skills, including the ability to prepare clear workpapers, narratives, control matrices, and audit findings.
• Advanced proficiency in Microsoft Office, particularly Excel, Word, Outlook, and PowerPoint.
• Experience with audit management, SOX, data analytics, or ERP systems is preferred.
• Cybersecurity audit experience, including knowledge of NIST, ISO 27001, or other security frameworks, is a strong asset.
• Excellent verbal and written communication skills, with the ability to work effectively with stakeholders across countries and functions.
• Strong analytical, organizational, and project management skills, with the ability to manage multiple priorities and meet deadlines.
• Flexibility to collaborate across time zones, with occasional travel within Canada as needed.

Compensation

The expected annual base salary for this role is CAD $60,000-75,000. Please note that the actual offer will be determined based on your skills, experience, education, market benchmarks, and internal equity.

Total Rewards

At Tilray Brands, we recognize the importance of comprehensive total rewards.

We provide

• Vacation Time & Paid Personal Time Off
• Employee & Family Assistance Program
• Growth and Internal Mobility Opportunities

Tilray welcomes applications from all qualified individuals and is committed to employment equity and diversity in the workplace.

Accommodations areavailable for applicants with disabilities throughout the recruitment process. If yourequireaccommodationsfor interviews or other meetings, pleaseadvisewhensubmittingyour application.

Please note that Tilray does not authorize, engage, or sponsor any consultants, agencies or organizations thatseekcertain personal or financial information from you (e.g.passwords, login ids, credit card information). Tilray does not charge any application,processingor onboardingfeeat any stage of the recruitment or hiring process.

Tilray does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to Tilray or any of its subsidiaries, directly or indirectly, will be considered Tilray Brands, Inc. property. Tilray will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for engaged services to submit resumes.