IT Audit Analyst (GRC) at Cresco Labs in Chicago, IL

COMPANY OVERVIEW Cresco Labs is one of the largest public, vertically integrated, multistate operators in the cannabis industry. Our portfolio of in-house cultivated and manufactured brands features some of the highest quality, most awarded and most popular cannabis products in America. With dozens of locations nationwide, our owned and operated Sunnyside® dispensaries provide a welcoming, positive, judgement-free place to shop for anyone at any point on their cannabis journey. Founded in 2013, Cresco Labs’ mission is to normalize and professionalize cannabis through our passionate employees. As stewards of the cannabis industry, our teams are constantly focused on supporting the needs of our fellow colleagues, consumers, customers, and communities alike. With a focus on Social Equity and Educational Development, our SEEDTM initiative ensures that our company reflects the communities in which we serve, ensuring equal opportunity for all to have the knowledge and resources to work in and own businesses in cannabis. At Cresco Labs, we aim to revolutionize and lead the nation’s cannabis industry with a focus on quality and consistency of product, and to bring legitimacy to the industry with the highest level of integrity and professionalism. If you’re interested in joining our mission, click the below links to join our team today! MISSION STATEMENT At Cresco, we aim to lead the nation’s cannabis industry with a focus on regulatory compliance, product consistency, and customer satisfaction. Our operations bring legitimacy to the cannabis industry by acting with the highest level of integrity, strictly adhering to regulations, and promoting the clinical efficacy of cannabis. As Cresco grows, we will operate with the same level of professionalism and precision in each new market we move in to. JOB SUMMARY The IT GRC Analyst reports to the Director of IT Governance, Risk & Compliance (GRC) and supports day-to-day IT audit and compliance activities to help ensure systems and processes are working as expected. This role supports IT audit activities by pulling, validating, and reviewing system-generated data, while partnering with teams across the business to gather supporting documentation. In this role, the Analyst helps maintain key IT General Controls (ITGCs), with a focus on Logical Access (user access controls) and Change Management (how system changes are approved and tracked). The position also contributes to remediation efforts and helps keep the organization audit-ready. This role is well-suited for someone who enjoys working with data, staying organized, and improving processes. The position involves reviewing system data, identifying inconsistencies, and supporting teams in resolving issues. The ideal candidate is detail-oriented, collaborative, and eager to learn, with an interest in using technology to investigate and analyze data to support audit and compliance activities. Success in this role means maintaining accurate audit data, ensuring effective control operations, and supporting the Director in maintaining an audit-ready environment. CORE JOB DUTIES Export, validate, and document system data for monthly Logical Access and Change Management reviews Maintain audit documentation and control evidence for consistent tracking and review Own the collection and management of audit data (Information Provided by Entity – IPE) across systems, partnering with system owners Use tools such as Excel, AuditBoard, and FreshService to track audit activities, manage workflows, and validate data Analyze system data to identify issues, investigate anomalies, and escalate findings Prepare Logical Access review files (user access and role changes) as part of a repeatable, monthly review process Monitor and review internal Change Management processes to ensure changes are properly approved and documented Support SOX (404b) testing and ongoing audit requirements • Identify opportunities to improve and simplify audit and control processes REQUIRED EXPERIENCE, EDUCATION AND SKILLS Experience supporting ITGC, SOX, or similar control frameworks preferred Strong Excel skills with the ability to analyze and work with data High attention to detail with strong organizational skills Clear communication skills and ability to work with cross-functional teams Interest in automation, process improvement, and workflow optimization BENEFITS Cresco Labs is proud to offer eligible employees a robust offering of benefits including, major medical, dental and vision insurance, a 401(K)-match program, FSA/HSA programs, LTD/STD options, life insurance and AD&D.  We also offer eligible employees paid holidays and paid time off.  Other rewards may include annual discretionary bonuses, stock options as well as participation in our employee discount program. Benefits eligibility for permanent positions may vary by full-time or part-time roles, location, or position. In accordance with any local and state compensation laws, the compensation listed is the current estimated range for the position. Final offer details and future compensation may be determined by multiple factors including but not limited to, geographic location, market compensation data, skills, experience, and other relevant factors. For questions about this please discuss with your recruiter during the interview process. Pay Range $60,000—$75,000 USD ADDITIONAL REQUIREMENTS Must be 21 years of age or older to apply Must comply with all legal or company regulations for working in the industry The company does not offer employment-based visa sponsorshipfor this role or any other position, now or in the future. Applicants must be legally authorized to work in the United States on a permanent basis without the need for current or future sponsorship at any time. Cresco Labs is an Equal Opportunity Employer and all applicants will be considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. California Consumer Privacy Act (“CCPA”) Notice to Applicants: Please read the California Employee Privacy Notice(“CA Privacy Notice”) regarding Sunnyside* and its affiliate Cresco Labs’ policies pertaining to the collection, use, and disclosure of personal information. This CA Privacy Notice supplements the information contained in the Sunnyside* Privacy Policy and applies to California resident employees and job applicants. Applicants with disabilities may access this notice in an alternative format by contacting CCPAnotice@crescolabs.com Reporting a Scam: Cresco Labs is aware of fictitious employment offers being circulated from various sources. Many of these schemes consist of an alleged offer of employment with Cresco Labs with the intention of gaining personal information, including payment and/or banking information. Be aware that fraudulent job offers and correspondence may appear legitimate: they may feature a Cresco Labs logo, they may appear to originate from an official-looking email address or web site, or they may be sent by individuals purporting to represent Cresco Labs or an entity which includes the word Cresco Labs in its name. Please note that Cresco Labs does not ask for payment or personal banking information as a condition of employment. Any personal information is requested for payroll or state badging purposes only. Applications can be securely submitted through our career’s pages. We are working diligently to block this from happening. Beware if an offer of employment looks too good to be true. Never divulge personal and banking information or send money if you are unsure of the authenticity of an email or other communication in the name of Cresco Labs. If you are in doubt, please contact us at Report-a-spam@crescolabs.comwith questions.