IT Audit Analyst (GRC)

MISSION STATEMENT At Cresco, we aim to lead the nation’s cannabis industry with a focus on regulatory compliance, product consistency, and customer satisfaction. Our operations bring legitimacy to the cannabis industry by acting with the highest level of integrity, strictly adhering to regulations, and promoting the clinical efficacy of cannabis. As Cresco grows, we will operate with the same level of professionalism and precision in each new market we move in to. JOB SUMMARY The IT GRC Analyst reports to the Director of IT Governance, Risk & Compliance (GRC) and supports day-to-day IT audit and compliance activities to help ensure systems and processes are working as expected. This role supports IT audit activities by pulling, validating, and reviewing system-generated data, while partnering with teams across the business to gather supporting documentation. In this role, the Analyst helps maintain key IT General Controls (ITGCs), with a focus on Logical Access (user access controls) and Change Management (how system changes are approved and tracked). The position also contributes to remediation efforts and helps keep the organization audit-ready. The role is well-suited for someone who enjoys working with data, staying organized, and improving processes. The position involves reviewing system data, identifying inconsistencies, and supporting teams in resolving issues. The ideal candidate is detail-oriented, collaborative, and eager to learn, with an interest in using technology to investigate and analyze data to support audit and compliance activities. Success in this role means maintaining accurate audit data, ensuring effective control operations, and supporting the Director in maintaining an audit-ready environment. CORE JOB DUTIES Export, validate, and document system data for monthly Logical Access and Change Management reviews Maintain audit documentation and control evidence for consistent tracking and review Own the collection and management of audit data (Information Provided by Entity – IPE) across systems, partnering with system owners Use tools such as Excel, AuditBoard, and FreshService to track audit activities, manage workflows, and validate data Analyze system data to identify issues, investigate anomalies, andEscalate findings Prepare Logical Access review files (user access and role changes) as part of a repeatable, monthly review process Monitor and review internal Change Management processes to ensure changes are properly approved and documented Support SOX (404b) testing and ongoing audit requirements Identify opportunities to improve and simplify audit and control processes REQUIRED EXPERIENCE, EDUCATION AND SKILLS Experience supporting ITGC, SOX, or similar control frameworks preferred Strong Excel skills with the ability to analyze and work with data High attention to detail with strong organizational skills Clear communication skills and ability to work with cross‑functional teams Interest in automation, process improvement, and workflow optimization BENEFITS Cresco Labs is proud to offer eligible employees a robust offering of benefits including major medical, dental and vision insurance, a 401(k)-match program, FSA/HSA programs, LTD/STD options, life insurance and AD&D. We also offer eligible employees paid holidays and paid time off. Other rewards may include annual discretionary bonuses, stock options as well as participation in our employee discount program. Benefits eligibility for permanent positions may vary by full‑time or part‑time roles, location, or position. Pay Range: $60,000 - $75,000 USD ADDITIONAL REQUIREMENTS Must be 21 years of age or older to apply Must comply with all legal or company regulations for working in the industry The company does not offer employment‑based visa sponsorship for this role or any other position, now or in the future. Applicants must be legally authorized to work in the United States on a permanent basis without the need for current or future sponsorship at any time. Cresco Labs is an Equal Opportunity Employer and all applicants will be considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. #J-18808-Ljbffr