Auditor, Technology – Global Audit & Enterprise Risk Management

Columbia Sportswear Company; Town of Stanton (WI); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

401(k) with company match

Medical, dental, vision insurance

Wellness program

Job summary

Columbia Sportswear Company is seeking a Technology Auditor to join the Global Audit & Risk Management team. The role supports IT risk assessment, cybersecurity, data privacy, and governance across a dynamic IT environment.

You will coordinate audits, leverage tools like AuditBoard and PowerBI, and collaborate with Legal, Data Privacy, and Digital Technology teams. The position requires 2+ years in technology audit or related fields, a relevant degree, and knowledge of IT control frameworks.

Qualifications

• Bachelor’s degree in information systems, CS, cybersecurity, or related field; or business degree with IT risk experience.
• 2+ years of progressive experience in technology audit, risk management, cybersecurity, or compliance.
• Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT).
• Experience testing and applying cybersecurity frameworks.
• Experience evaluating and testing privacy frameworks, such as state-driven privacy acts.
• Familiarity with OS, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations.
• Certifications: CISA, CISSP, CISM, CRISC, CEH, CompTIA Security+ beneficial.

Responsibilities

• Assess IT-related risks to support annual audit plans.
• Evaluate system and environmental infrastructure to address cybersecurity, cloud, and privacy risks.
• Conduct audits covering governance, cybersecurity, privacy, identity and access management, change management, and system development.
• Ensure audits comply with regulatory requirements and test lifecycle controls.
• Collaborate with stakeholders across business areas to support IT initiatives and governance.

Skills

IT audit

Risk management

Cybersecurity

Regulatory compliance

Communication

Education

Bachelor’s degree in Information Systems or related field

Tools

AuditBoard

PowerBI

NIST framework

Job description

This position is designated as a hybrid role based out of our headquarters near Portland, Oregon. The current expectation is for employees to work onsite four days per week, subject to change based on business needs. This in-office requirement may be adjusted at the discretion of the company. OUTGROWN YOUR OWN BACKYARD? COME PLAY IN OURS. At Columbia, we’re as passionate about the outdoors as you are. And while our gear is available worldwide, we’re proud to be based in the Pacific Northwest, where natural wonders are our playground. Every product we make and every task we undertake is inspired by the famous words of our founder Gert Boyle: "It's perfect. Now make it better." As pioneers of relentless improvement, we are constantly evolving. We believe the outdoors is ours to protect and strive to keep our planet healthy. We believe in empowering people to experience the outdoors to the fullest. And we believe in you.

General Position Summary

Columbia Sportswear’s Global Audit & Risk Management team partners with leaders across the enterprise to protect and enhance company value through world-class risk management, audit, and advisory services. Columbia Sportswear Company has a dynamic and rapidly evolving IT environment. The Technology Auditor assists in the coordination and execution of Information Technology audit projects throughout the company, including. engagement and collaborates with Information Security, Data Privacy Digital Technology, Legal, and business stakeholders to understand the Company’s business, IT environments, and associated risks. The Technology Auditor will assist the Global Audit and Enterprise Risk Management Technology Team in executing audit procedures that support the evaluation of technology risks, including cybersecurity and data privacy. The Technology Auditor also plays an important role in aiding the strategic insight, advice, and guidance with respect to IT risk management, governance, policy, and operations, to support the broader GAERM team as influencers at all levels of the organization.

What You Will Do

• Assist the IT Audit Senior Manager and Team in evaluating IT-related risks to support the development of annual audit plans
• Deliver a strong system and environmental infrastructure acumen to support IT driven and integrated operational audits to address areas such as cybersecurity, cloud infrastructure and data privacy risks
• Execute audits covering IT governance, cybersecurity, data privacy, identity and access management, change management and/or system development
• Conduct cybersecurity and privacy audits to address applicable state, federal, and international regulatory requirements
• Utilize technology-based audit tools that support audit work, such as AuditBoard, PowerBI, and AI
• Utilize IT best practices and frameworks (i.e. ITIL, ISO, COBIT, NIST, and CIS)
• Coordinate and collaborate with key functional contacts in many business areas to provide assistance and input for various IT initiatives
• Effectively communicate across various cultures and global teams, ensuring an inclusive environment is maintained
• Collaborate with internal audit functions to assure that the testing of system development lifecycle controls meets compliance requirements and is effectively executed to support key stakeholder needs - Champion business process improvement throughout the organization
• Strong project/time management skills with the ability to handle and manage multiple priorities with a sense of urgency
• Communicate with Impact: Deliver clear, concise, and impactful findings to stakeholders in a timely and effective manner
• Uphold Company Values: Model a culture of accountability, collaboration, quality and continuous improvement
• Promote Integrity: Uphold the Global Internal Audit Standards and promote a culture of integrity across the organization

Who You Will Work With

This role reports to the Senior Manager of Technology - Global Audit & Enterprise Risk Management and serves as a trusted team member who plays a key role in collaborating with other Technology audit and digital technology team members to drive the Global Audit & Enterprise Risk Management strategic vision and objectives, ensuring best-in-class service and performance.

What You Bring

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field; or a business degree with significant IT risk experience
• 2+ years of progressive experience in technology audit, risk management, cybersecurity, or compliance
• Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT)
• Experience in testing and applying cybersecurity frameworks
• Experience with evaluating and testing privacy frameworks, such as state-driven privacy acts and regulations
• Familiarity with operating systems, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations
• Certifications: Should have achieved certification/s reflective of career achievements (e.g., CISA, CISSP, CISM, CRISC, CEH, CompTIA Security+)

Why Join Us

Join a global, innovative organization where you’ll shape the future of technology risk management. Work on high-impact projects, collaborate with leaders across the enterprise, and help safeguard our digital ecosystem while enabling business growth. #LI-JD1 This job description is not meant to be an all-inclusive list of duties and responsibilities, but constitutes a general definition of the position's scope and function in the company.

Columbia Sportswear Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Columbia Sportswear is committed to working with and providing reasonable accommodation for individuals with disabilities. https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf. If you need reasonable accommodation because of a disability for any part of the employment process, please notify your recruiter.

At Columbia Sportswear Company, we’re proud to offer regular full‑time employees a benefits package that includes a variety of services and products to help make your life and work more rewarding. Our benefit programs contribute to overall employee well‑being by aligning those programs with the fundamental elements of well‑being: physical, social/emotional, financial, career and community.

• Benefits that can protect your family’s financial future and help you save money through our 401k plan plus a generous company match.
• Columbia offers medical, dental, vision, life Insurance, disability, flexible spending accounts, health savings account, and an assortment of voluntary benefit offerings (accident, critical illness, hospital indemnity, and legal services).
• In addition, Columbia offers EAP + which is free and confidential 24/7/365 counseling services.
• We have extensive wellness benefits, employee discounts and a generous time off program available.

Founded in 1938, Columbia Sportswear Company is a global leader in designing, sourcing, marketing, and distributing outdoor and active lifestyle apparel, footwear, accessories, and equipment. Our four primary brands — Columbia®, Mountain Hardwear®, SOREL® and prAna® — complement each other to address the diverse needs of active consumers and their products have gained an international reputation for their innovation, quality and performance. Learn more about our family of brands here.