Auditor, Technology - Global Audit & Enterprise Risk Management

Columbia Sportswear; Portland (OR); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

401k with company match

Medical, dental, vision

Life Insurance & disability

Flexible spending accounts

Employee discounts

Generous time off

Job summary

Columbia Sportswear Company in Portland, OR, is seeking a Technology Auditor to join the Global Audit & Risk Management team. The role supports IT risk assessment, audits of cybersecurity and data privacy, and collaboration with security, legal, and business units.

The ideal candidate has 2+ years in technology audit or related fields and a Bachelor's degree in IT or a business discipline with IT risk experience. This is a hybrid role with in-office expectation four days per week.

Qualifications

• 2+ years in technology audit, risk management, cybersecurity, or compliance.
• Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT).
• Experience with privacy frameworks and testing.
• Familiarity with OS, databases, cloud platforms, and enterprise architecture.

Responsibilities

• Evaluate IT-related risks to support annual audit plans.
• Audit cybersecurity and privacy controls, including cloud and identity management.
• Collaborate with IT, security, legal, and business stakeholders across cultures.
• Communicate findings clearly and drive improvements in governance and controls.

Skills

Cybersecurity

IT risk management

IT controls

Auditing

Education

Bachelor's in Information Systems

Business degree with IT risk experience

Tools

AuditBoard

PowerBI

Job description

This position is designated as a hybrid role based out of our headquarters near Portland, Oregon. The current expectation is for employees to work onsite four days per week, subject to change based on business needs. This in-office requirement may be adjusted at the discretion of the company.

At Columbia, we're as passionate about the outdoors as you are. And while our gear is available worldwide, we're proud to be based in the Pacific Northwest, where natural wonders are our playground.

Every product we make and every task we undertake is inspired by the famous words of our founder Gert Boyle: "It's perfect. Now make it better." As pioneers of relentless improvement, we are constantly evolving.

We believe the outdoors is ours to protect and strive to keep our planet healthy. We believe in empowering people to experience the outdoors to the fullest.

And we believe in you.

General Position Summary:

Columbia Sportswear's Global Audit & Risk Management team partners with leaders across the enterprise to protect and enhance company value through world-class risk management, audit, and advisory services. Columbia Sportswear Company has a dynamic and rapidly evolving IT environment. The Technology Auditor assists in the coordination and execution of Information Technology audit projects throughout the company, including. engagement and collaborates with Information Security, Data Privacy Digital Technology, Legal, and business stakeholders to understand the Company's business, IT environments, and associated risks.

The Technology Auditor will assist the Global Audit and Enterprise Risk Management Technology Team in executing audit procedures that support the evaluation of technology risks, including cybersecurity and data privacy. The Technology Auditor also plays an important role in aiding the strategic insight, advice, and guidance with respect to IT risk management, governance, policy, and operations, to support the broader GAERM team as influencers at all levels of the organization.

What You Will Do:

• Assist the IT Audit Senior Manager and Team in evaluating IT-related risks to support the development of annual audit plans
• Deliver a strong system and environmental infrastructure acumen to support IT driven and integrated operational audits to address areas such as cybersecurity, cloud infrastructure and data privacy risks.
• Deliver High-Impact Audits: Execute audits covering IT governance, cybersecurity, data privacy, identity and access management, change management and/or system development.
• Conduct cybersecurity and privacy audits to address applicable state, federal, and international regulatory requirements.
• Utilize technology-based audit tools that support audit work, such as AuditBoard, PowerBI, and AI
• Utilize IT best practices and frameworks (i.e. ITIL, ISO, COBIT, NIST, and CIS)
• Coordinate and collaborate with key functional contacts in many business areas to provide assistance and input for various IT initiatives
• Effectively communicate across various cultures and global teams, ensuring an inclusive environment is maintained
• Collaborate with internal audit functions to assure that the testing of system development lifecycle controls meets compliance requirements and is effectively executed to support key stakeholder needs - Champion business process improvement throughout the organization
• Strong project/time management skills with the ability to handle and manage multiple priorities with a sense of urgency
• Communicate with Impact: Deliver clear, concise, and impactful findings to stakeholders in a timely and effective manner.
• Uphold Company Values: Model a culture of accountability, collaboration, quality and continuous improvement.
• Promote Integrity: Uphold the Global Internal Audit Standards and promote a culture of integrity across the organization.

Who You Will Work With:

This role reports to the Senior Manager of Technology - Global Audit & Enterprise Risk Management and serves as a trusted team member who plays a key role in collaborating with other Technology audit and digital technology team members to drive the Global Audit & Enterprise Risk Management strategic vision and objectives, ensuring best-in‑class service and performance.

What You Bring:

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field; or a business degree with significant IT risk experience.
• 2+ years of progressive experience in technology audit, risk management, cybersecurity, or compliance.
• Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT).
• Experience in testing and applying cybersecurity frameworks.
• Experience with evaluating and testing privacy frameworks, such as state-driven privacy acts and regulations.
• Familiarity with operating systems, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations.
• Certifications: Should have achieved certification/s reflective of career achievements (e.g., CISA, CISSP, CISM, CRISC, CEH, CompTIA Security+).

Why Join Us:

Join a global, innovative organization where you'll shape the future of technology risk management. Work on high-impact projects, collaborate with leaders across the enterprise, and help safeguard our digital ecosystem while enabling business growth.

Benefits:

• Benefits that can protect your family's financial future and help you save money through our 401k plan plus a generous company match.
• Columbia offers medical, dental, vision, life Insurance, disability, flexible spending accounts, health savings account, and an assortment of voluntary benefit offerings (accident, critical illness, hospital indemnity, and legal services).
• In addition, Columbia offers EAP + which is free and confidential 24/7/365 counseling services.
• We have extensive wellness benefits, employee discounts and a generous time off program available.
• Our benefit programs contribute to overall employee well-being by aligning those programs with the fundamental elements of well-being: physical, social/emotional, financial, career and community.

This job description is not meant to be an all-inclusive list of duties and responsibilities, but constitutes a general definition of the position's scope and function in the company.

Columbia Sportswear Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Columbia Sportswear is committed to working with and providing reasonable accommodation for individuals with disabilities. https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf. If you need an accommodation/adjustment to successfully complete and submit your application, please reach out to [e-mail] with the Subject: Applicant Assistance Requested.