Tech Risk Audit Manager — Infra, Cloud & SOX

DICK'S Sporting Goods; Coraopolis (Allegheny County); On-site; USD 110,000 - 160,000; Full time

Job summary

DICK’S Sporting Goods is expanding its Internal Audit team with multiple Technology Risk Audit roles. The Manager will lead audits across infrastructure, cloud, and applications, and partner with Technology to strengthen controls.

The role reports to the Sr. Director – IA Strategy & Transformation and oversees the audit program, coaching of Technology Risk Auditors, and complex special projects. Travel is expected ~10%.

Qualifications

• Bachelor's Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies.
• 5-7 total years experience, including 3+ total public accounting and/or internal audit years of experience; Previous experience within the retail or tech industry.
• Required certifications – CISA
• One of the following preferred certifications – CIA, CISSP, CIPP/US, CIPT, CIPM, CISM, CRISC, CDPSE, CGEIT certification(s) or similar certificate
• SOX and knowledge of general technology controls and able to audit unfamiliar areas with ease
• Strong competency and audit knowledge of at least three skillsets of the following: Infrastructure, Cloud, Cybersecurity, Privacy, System implementations, Application audits, including identification and testing of application controls and key interfaces/integrations, Data analytics, Performing special projects at the request of Management
• Excellent relationship-building skills with a strong client-service focus
• Proven ability to adapt to change, including adapting the Internal Audit plan and resource allocations to adjust based upon business need
• Travel – 10%

Responsibilities

• Manage technology and integrated audits, including audits over infrastructure, cloud environments, and applications
• Establish and maintain appropriate professional relationships with Company personnel and external auditors/consultants.
• Review risk assessments and process flows completed by Technology Risk Auditors to ensure appropriate coverage of risks and scoping.
• Create audit communication plan including internal status updates and updates to auditees.
• Review work programs and test procedures drafted by Technology Audit team for coverage and design of testing procedures to meet audit objectives
• Oversee audit team's fieldwork, including reviews of teammates' work papers
• Draft audit reports that consider root causes, impact/exposure, and both near and long-term recommendations/solutions for the auditee and Executive Management. Tailors and summarizes deliverables based upon audience for the appropriate level of detail.

Skills

Infrastructure

Cloud

Cybersecurity

Privacy

System implementations

Application audits

Data analytics

Education

Bachelor's Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies

Job description

DICK’S Sporting Goods is expanding its Internal Audit team with multiple Technology Risk Audit roles. The Manager will lead audits across infrastructure, cloud, and applications, and partner with Technology to strengthen controls.

The role reports to the Sr. Director – IA Strategy & Transformation and oversees the audit program, coaching of Technology Risk Auditors, and complex special projects. Travel is expected ~10%.