TSX: TLRY), is leading global lifestyle and consumer packaged goods company with operations in Canada, the United States, Europe, Australia, and Latin America that is leading as a transformative force at the nexus of cannabis, beverage, wellness, and entertainment, elevating lives through moments of connection. Tilray’s mission is to be a leading premium lifestyle company with a house of brands and innovative products that inspire joy, wellness and create memorable experiences. Tilray’s unprecedented platform supports over 40 brands in over 20 countries, including comprehensive cannabis offerings, hemp-based foods, and craft beverages.

Status: This posting is for an existing vacancy, covering a parental leave.

Employee Type: Open-ended contract.

Work Location: Toronto office; Reporting to the Manager, Internal Audit, the Senior IT Internal Controls Auditor is responsible for supporting the planning and execution of IT audit engagements in alignment with departmental standards and regulatory requirements. This role will execute walkthroughs, review control evidence, test the design and operating effectiveness of IT controls, document testing results, and identify exceptions or control deficiencies. The position will work closely with control owners from IT Business Applications, IT Operations, and external auditors to support timely, accurate, and well‑documented control testing across the Company’s operations.

Plan and perform SOX and IT controls testing, including walkthroughs, evidence review, sample selection, and test execution. Evaluate the design and operating effectiveness of internal controls over key IT systems. Review control evidence for completeness, accuracy, timeliness, and alignment with defined control requirements.

Document test procedures, results, exceptions, and conclusions in accordance with Internal Audit standards. Identify, document, and communicate control exceptions, deficiencies, and potential gaps in control design or operation. Support walkthroughs with control owners to confirm process understanding,



validate key control activities, and assess control design.

Maintain and update risk and control matrices, narratives, and testing documentation based on process or control changes. Track remediation activities and perform follow‑up testing to validate corrective actions. Coordinate with IT control owners and external auditors to support SOX testing, audit requests, and reliance procedures.

Bachelor’s degree in Information Technology, Accounting, Finance, or a related field. Minimum of 5 years of experience in IT internal audit, SOX compliance, or a related controls‑focused role. Strong understanding of internal control frameworks, including SOX, COSO, COBIT, and risk‑based audit methodologies.

Experience with IT audit testing, including ITGCs, ITACs, and system implementation or SDLC audits. Ability to identify control deficiencies, assess risk, and develop practical remediation recommendations. Strong documentation skills, including the ability to prepare clear workpapers, narratives, control matrices, and audit findings. Advanced proficiency in Microsoft Office, particularly Excel, Word, Outlook, and PowerPoint.

Experience with audit management, SOX, data analytics, or ERP systems is preferred. Cybersecurity audit experience, including knowledge of NIST, ISO 27001, or other security frameworks, is a strong asset. Robust analytical, organizational, and project management skills, with the ability to manage multiple priorities and meet deadlines.

Flexibility to collaborate across time zones, with occasional travel within Canada as needed. The expected annual base salary for this role is CAD $70,000-85,000.



Please note that the actual offer will be determined based on your skills, experience, education, market benchmarks, and internal equity.

Vacation

Time & Paid Personal Time Off Employee & Family Assistance Program Tilray welcomes applications from all qualified individuals and is committed to employment equity and diversity in the workplace. Accommodations are available for applicants with disabilities throughout the recruitment process. Please note that Tilray does not authorize, engage, or sponsor any consultants, agencies or organizations that seek certain personal or financial information from you (e.g. passwords, login ids, credit card information).

Tilray does not charge any application, processing or onboarding fee at any stage of the recruitment or hiring process.

TSX: TLRY) is a global lifestyle and consumer packaged goods company leading at the nexus of the beverage, cannabis, and wellness industries. Driven by innovation, disciplined execution, and a diversified business model, Tilray Brands operates a robust platform of category‑leading brands across craft beer and beverages, premium spirits, medical and adult‑use cannabis, and hemp wellness products. Tilray is currently the cannabis market leader in Canada — the largest federally legal cannabis market in the world — a leader in medical cannabis across Europe, a leader in branded hemp wellness products – with over 60% market share in North America – and the fourth‑largest craft beer brewer in the United States.

Supported by advanced cultivation, manufacturing, and distribution capabilities, Tilray Brands operates in over 20 countries across North America, Europe, and Latin America. Through its global scale, operational excellence, and solid portfolio of trusted brands, Tilray Brands is strategically positioned to capture expanding market opportunities worldwide, deliver sustainable long‑term shareholder value, and shape the future of global consumer markets. #

📌 Senior IT Internal Controls Auditor (Toronto)
🏢 High Park Holdings
📍 Toronto