Senior IT Controls Auditor - SOX & ITGC Specialist

Tilray; Greater London; On-site; GBP 70,000 - 95,000; Full time

Job summary

Tilray in London seeks a Senior IT Internal Controls Auditor to support SOX and IT controls testing across the company’s global operations. You will lead walkthroughs, review control evidence and document testing results to ensure design and operating effectiveness.

With 5+ years in IT internal audit or SOX compliance, you will collaborate with IT owners, external auditors and cross-country teams, maintain risk matrices, and help drive remediation through testing and reporting.

Qualifications

• Bachelor’s degree in IT, Accounting, Finance, or related field.
• Minimum 5 years of IT internal audit, SOX compliance, or similar role.
• Familiarity with internal control frameworks (SOX, COSO, COBIT) and risk-based auditing.

Responsibilities

• Plan and perform SOX and IT controls testing with walkthroughs and evidence review.
• Evaluate design and operating effectiveness of IT controls over key systems.
• Review control evidence for completeness, accuracy and timeliness.
• Document test procedures, results, and conclusions per audit standards.
• Identify, document, communicate exceptions and remediation needs.
• Coordinate with control owners and external auditors for testing and reliance.
• Maintain risk and control matrices, narratives, and testing docs.
• Track remediation activities and perform follow-up testing.

Skills

IT audit

SOX compliance

Control testing

Risk assessment

Documentation

Data analytics

Education

Bachelor’s degree in Information Technology, Accounting, Finance, or related field

Tools

Microsoft Office

Job description

Tilray in London seeks a Senior IT Internal Controls Auditor to support SOX and IT controls testing across the company’s global operations. You will lead walkthroughs, review control evidence and document testing results to ensure design and operating effectiveness.

With 5+ years in IT internal audit or SOX compliance, you will collaborate with IT owners, external auditors and cross-country teams, maintain risk matrices, and help drive remediation through testing and reporting.