Senior Technology Risk Auditor

DICK'S Sporting Goods, Inc.; United States; On-site; USD 110,000 - 140,000; Full time

Job summary

DICK’S Sporting Goods is expanding its Internal Audit team with several new Technology Internal Audit roles. The Senior Technology Risk Auditor will provide assurance on technology risks, reporting to the Sr. Director – IA Strategy & Transformation and collaborating with Technology to strengthen controls.

The role covers technology and implementation audits, risk assessments, and effective communication of findings to Management. Travel approx. 15% is expected.

Qualifications

• Bachelor’s Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies.
• 3–5 years of technology audit, cybersecurity, or risk experience.
• CISA, CIA, CRISC, CIPP/US and/or CIPM certification(s) preferred.
• SOX and knowledge of general technology controls and able to audit unfamiliar areas.

Responsibilities

• Perform technology and integrated audits, focusing on infrastructure, cloud environments, application audits, and controls.
• Conduct risk assessments and document processes for audit areas.
• Map data flows and control points with auditees to validate understanding and identify risks.
• Prepare audit requests, manage follow-ups, and ensure timely completion of documentation.
• Execute test steps for technology general controls, application/interface, and enterprise risk management.
• Assist root cause analyses and communicate observations to management.

Skills

Technology audit

Risk assessment

SOX knowledge

Stakeholder communication

Education

Bachelor’s Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies

Tools

Azure

Windows

Unix

Oracle

SQL Server

iSeries

Job description

At DICK’S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve. If you are ready to make a difference as part of the world’s greatest sports team,

OVERVIEW:

As Dick’s Sporting Goods continues to grow and invest in its technology ecosystem, we’re expanding our Internal Audit team with several new Technology Internal Audit roles. These positions are part of our ongoing focus on strengthening our partnership with Technology to provide assurance and insights as they build for what’s next. The Senior Technology Risk Auditor will be responsible for providing assurance and guidance to the Company related to technology risks. This position will report directly to the Sr. Director – IA Strategy & Transformation and be a key member of the Internal Audit department and will be responsible for evaluating the effectiveness of internal processes and controls to mitigate technology, security, and business risks.

Role Responsibilities:

• Technology and Integrated Audits Performs general technology and integrated audits, with a focus on infrastructure, cloud environments, application audits, application controls, and/or interface controls, as applicable to each audit
• Responsible for performing risk assessments and documenting processes for audit areas
• Performs risk assessments to identify relevant risks to the applicable audit and determine the extent of testing procedures to be performed
• Where applicable, partners with auditees to document process and data flows for areas under audit to use as a validation tool with the auditee to confirm understanding of the process and to document risks, control points, and scoping decisions
• Schedules and holds walk through meetings with auditees
• Drafts request lists for audits and manages requests to account for turnaround time and potential follow-up requests; monitors requests for completion and reviews received requests in a timely manner to ensure it meets the audit objectives
• Executes audit fieldwork to consider inherent risks of the processes audited
• Assists team in root cause analyses and exposure checks for issues identified
• Communicates with audit contacts on requests, follow-up questions, and discusses observations identified through fieldwork with Technology Internal Audit Manager, Senior Manager, and/or Director prior to discussing with auditee
• Uses audit engagement to develop or strengthen relationships with auditees
• Communicate audit results and recommendations for improvement to Management through formal audit reports and presentations that consider root causes, impact/exposure, and both near and long-term recommendations/solutions

Implementation Audits

• Performs the activities above for system Implementations and technology modernization programs, with a focus on agile development methodologies to evaluate development, program management, integration, data conversion/validation, and testing controls
• Interacts with auditees to gain an understanding of the technology processes and internal controls
• Execute defined test steps to evaluate the controls, including technology general controls, application/interface, entity-level, and enterprise risk management
• Adequately prepares exception support and examples for findings and improvement opportunities
• Perform detailed audit testing, including root cause analyses, and assess any exposure or residual risk
• Communicate audit results and recommendations for improvement to Management through formal audit reports and presentations

QUALIFICATIONS:

• Bachelor's Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies
• 3-5 total years experience, including 3+ years of technology audit, cybersecurity, or risk experience required; public accounting or consulting experience preferred
• CISA, CIA, CRISC, CIPP/US and/or CIPM certification(s) preferred
• SOX and knowledge of general technology controls and able to audit unfamiliar areas with ease
• Understanding of Technology Risk Assessment, SOX, general technology controls, system implementation risks/controls, data governance, cybersecurity controls, and privacy risks
• Auditing in various technology environments: Azure, Windows, Unix, Oracle, SQL Server Database, and/or iSeries Technical audit knowledge of infrastructure, cloud, application controls, interface controls, control frameworks (e.g., PCI DSS, NIST, COSO), and development methodologies
• Ability to perform root cause analysis and understand risk exposure

Travel – 15% #LI-KF1

VIRTUAL REQUIREMENTS:

At DICK’S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments. To ensure a smooth and secure experience, please note the following: Cameras must be on during all virtual interviews. AI tools are not permitted to be used by the candidate during any part of the interview process. Offers are contingent upon a satisfactory background check which may include ID verification. If you have any questions or need accommodations, we’re here to help. Thanks for helping us keep the process fair and secure for everyone!

ACHIEVING SUCCESS AT DICK’S SPORTING GOODS

Everything we do is focused on helping athletes achieve their dreams. Accomplishing this takes a team of people committed to being their best. That means learning, growing, advancing and exploring new experiences. Advancing in our career is much like a climbing wall; it isn't always a vertical path. Climbers plan their path, make moves in every direction and reach further. Whatever direction you want to explore, we encourage you to be brave, curious and hungry for new experiences. We are the athletes, the coaches, the energy in the stands, and the fans that fill them. The referees that call the games and the neighbor that can’t wait until the next one. The sports enthusiasts that wake up and strive to reach our personal best. We are DICK’S Sporting Goods – a community united by our passion for sport, standing together in our pursuit of our best. What we bring to the game is what we believe will change it. By upholding the values that strengthen our performance, fosters collaboration, and ignites our desire to win, we actively demonstrate the impact and change we inspire when we work as one.