IT Compliance Analyst

IT Compliance Analyst

Division: IT - ANZ

Job location: Brisbane, QLD (hybrid)

Hours: 38 hours per week, Monday – Friday

Employment type: Fixed Term Contract (12 months) operating in a hybrid structure

About us

We're MedReleaf Australia - a leading alternative medicine company in Australia - dedicated to improving the lives of others. As part of Aurora Cannabis, the world's largest medical cannabis company operating in regulated markets, we're proud to be part of opening the world to medical cannabis. Together, with our talented team of professionals, we've defined what we call the MedReleaf Way - a secret recipe for success and differentiated approach that allows us to be a trusted provider, educator, and leader in the industry and community advocate – and this is what makes us a special place to work.

We're in an exciting period of growth and that means we're expanding our team across the globe, including Australia and New Zealand As part of the Aurora community, we have a strong presence in markets including Canada, Europe, Australia, and New Zealand, with a range of dynamic opportunities. Check out our Global Aurora Careers Page to learn more and explore all our career opportunities.

About you

It's grow time and we're searching for an experienced professional to plant their roots with us as an
IT Compliance Analyst.
In this role, you will collaborate with all levels of the organization to support IT audit planning, development, and implementation. You will leverage your deep knowledge of compliance, operational processes, and IT to support the effective control management programs across New Zealand and Australia. Sound interesting? Here is a little more…

As an IT Compliance Analyst you will…

• Support the Enterprise Risk and Assurance and IT team on IT audit planning, program development, special projects and preparation for IT SOX initiatives
• Support the Systems Delivery Lifecycle (SDLC) project audits, operational ITGC audits, as well as adherence to other relevant policies
• Support the execution of IT audit activities, including the daily operational monitoring checks, periodic inspections points, fulfillment of IT audit requests, and training/awareness campaigns
• Working with management and development of corrective action plans for IT audit issues or challenges identified
• Collaborate with the continuous improvement of IT compliance conditions by conducting analysis, reviewing industry requirements, providing recommendations to senior leadership, and ensure adherence to IT policies and procedures for internal and external regulations
• Work with management to develop reporting to keep project stakeholders and senior management informed on key IT compliance metrics
• Review all new products, systems, or processes to ensure compliance and provide training to applicable users
• Lead the SOX and ITGC Control Report Reviews and IT KPI Compliance Scorecard
• Assist with quarterly vulnerability scans and annual penetration testing.
• Train the IT Manager and business application owners on the new process and drive the operationalization of routine activities so they are competent on the compliance cycle and deliverables
• Contribute with the maintenance of the control reviewers listing for the ITGC SOX controls and Business Application Owners reviewers and work with external auditors to coordinate collection of evidence and attend walkthroughs
• Perform frequent SOX IT internal control activities and documentation on the ServiceNow GRC application

Here's what you will help us design and deliver:

• Remediation action plan documentation
• Development of control performance indicators
• Creation of training slides for the IT team and business
• Internal control gap analysis and action plan

You're the ideal candidate if you have…

• Post-secondary education, such as a bachelor's degree, in Computer Science, Business Administration or relevant field
• 7-10 years of relevant work experience supporting IT compliance, reporting, auditing, controls, program planning and special projects in a SOX public company environment
  (we would also welcome an equivalent combination of education, training, and experience)
• Strong background in creating and maintaining IT policies, standards, processes, and procedure documentation and using MS Office

Bonus points if you have…

• A CIA, CISA or equivalent designation
  (or are in the process of pursuing)
• Experience working with big four audit companies
• Experience working with IT General Controls, Systems Development Life cycle framework and systems such as ServiceNow, Sage X3
• Experience with the following regulations is ideal: Australian Privacy Regulations, Australian Cannabis Regulations, GDPR/PIPEDA, HIPPA and PHIPA, GMP/GACP, SOX and C-SOX, PCI-DSS and NIST, CIS 18, ISO27001

We can't wait to meet you if you are…

• An analytical professional with strong problem-solving skills who can think outside the box and have courageous conversations to drive creative solutions and ensure IT compliance
• A methodical individual who leads with a proactive approach to anticipate needs and push the organization forward to drive value and achieve long-term success
• A collaborative team player who enjoys working with others to achieve goals, build processes and improve operations
• A dynamic navigator who thrives in a multi-faceted environment where they can tackle new challenges and manage a variety of projects
• Aligned seamlessly with our culture, living out our core values of courage, compassion, accountability, and collaboration, and you're ready to take the next exciting step in your career with us

With us, you will find a place where you belong and love where you work with a whole crop of benefits like the following:

• Competitive Compensation:
  Benefit from a competitive base salary complemented by superannuation contributions, ensuring your financial well-being
• Professional Development:
  Unlock robust growth opportunities with access to conferences, workshops and webinars
• Work-Life Balance:
  Prioritize your well-being with our flexible hybrid work structure, offering remote work options and annual and personal leave
• Vibrant Culture:
  Join a dynamic team with exciting events like sales celebrations, holiday parties, volunteer initiatives, and product launches that make every day memorable
• Collaborative Office Space:
  Work in an open, modern office with efficient technology, free snacks, and beverages to fuel your creativity and collaboration at our Brisbane location
• Exciting Journey:
  Be part of a cutting-edge journey at one of the largest alternative medicine companies in the world, where you'll play a pivotal role in shaping the future of holistic healthcare, contribute to improving the lives of our patients, and be at the forefront of something new and groundbreaking in global health and wellness

We're committed to your success and dedicated to helping you #GrowWithAurora and #GrowWithMedReleaf every step of the way.

Next steps

Plant your roots with us by submitting your resume through LinkedIn by clicking "Apply Now". Your application will be sent to our Human Resources Team and if we think you're a fit, we will contact you via email.

Diversity and inclusion

We have a diverse team of professionals who bring their best everyday so we can continue to be a leader in our industry - and this is why we encourage all candidates to apply for career opportunities at MedReleaf Australia and Aurora Cannabis regardless of race, national origin, colour, religion, age, gender identity or expression, sexual orientation, marital and family status, disability, or any other identifying characteristic. If you require an accommodation in the recruitment process, please contact our Human Resources Team via email:

This role will operate in the QLD time zone and may require travel and flexibility with schedule to work in different time zones as required. A satisfactory Police and Reference Check are required for an offer of employment.