Technology Risk Auditor

DICK'S Sporting Goods; McAlisters Crossroads (PA); On-site; USD 80,000 - 110,000; Full time

Job summary

Dick's Sporting Goods is expanding its Internal Audit team with Technology Internal Audit roles to strengthen technology risk assessment and controls across infrastructure, cloud, and applications.

Responsibilities include executing audits, evaluating ITGCs, performing SOX testing, and communicating findings to management. Candidates typically have 1–3 years in audit/retail IT and a relevant bachelor's degree; onsite store/DC audits are part of the scope.

Qualifications

• Bachelor's degree in Information Systems and Technology, Data Science, or Cybersecurity Studies.
• 1-3 years total experience; 1+ years in public accounting and/or internal audit; 1+ years in retail accounting/finance/IT.

Responsibilities

• Performs general technology and integrated audits focusing on infrastructure, cloud environments, application audits, and interface controls.
• Schedules walkthroughs with auditees and drafts/monitors audit requests.
• Conducts fieldwork, documents conclusions, and supports root cause analyses.
• Communicates observations to audit management and stakeholders; strengthens auditee relationships.
• Affects SOX and internal control testing across technology controls.
• Participates in on-site store and distribution center audits and system implementations.

Education

Bachelor's Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies

Tools

AS/400

Oracle

SQL Server

Unix

Windows

Active Directory

Workday

PeopleSoft Financials

Job description

At DICK'S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.

OVERVIEW:

As Dick's Sporting Goods continues to grow and invest in its technology ecosystem, we're expanding our Internal Audit team with several new Technology Internal Audit roles. These positions are part of our ongoing focus on strengthening our partnership with Technology to provide assurance and insights as they build for what's next.

Technology Risk Auditor will be a key member of the Internal Audit department and will be responsible for evaluating the effectiveness of technology processes and controls to mitigate technology risks, including processes over access management, change management, and technology operations. This teammate will add value to the Technology organization and broader Company by providing independent, objective, assurance over the effectiveness of technology processes and controls.

JOB DUTIES & RESPONSIBILITIES

Technology and Integrated Audits

• Performs general technology and integrated audits, with a focus on infrastructure, cloud environments, application audits, application controls, and/or interface controls, as applicable to each audit
• Schedules and holds walk through meetings with auditees.
• Drafts request lists for audits and manages requests to account for turnaround time and potential follow-up requests; monitors requests for completion and reviews received requests in a timely manner to ensure it meets the audit objectives.
• Conducts technology and integrated audits to evaluate risks and controls within various technology environments by executing audit fieldwork to consider risks of the processes audited by preparing work programs and supporting work papers to support conclusions. Assists team in root cause analyses and exposure checks for issues identified and documents conclusions within audit work programs.
• Communicates with audit contacts on requests, follow-up questions, and discusses observations identified through fieldwork with Technology Internal Audit Manager, Senior Manager, and/or Director prior to discussing with auditee.
• Uses audit engagement to develop or strengthen relationships with auditees.
• Conducts research and leverages prior learnings/experiences to gain or leverage specific knowledge sufficient to enable analysis of technology and related controls in key areas such as infrastructure, cloud environments, application audits, application controls, and/or interface controls.

Sarbanes-Oxley (SOX) and Internal Control Testing

• Interacts with auditees to gain an understanding of the technology processes and internal controls.
• Executes defined test steps to evaluate the controls, including technology general controls, application/interface, entity-level, and enterprise risk management. Documents independent, objective assessment of Management's controls in audit work programs and prepares supporting work papers to support conclusions reached.
• Adequately prepares exception support and examples for findings and improvement opportunities.
• Versed in a variety of technologies including AS/400, Oracle, SQL Server Database, Unix, Windows, Active Directory, Workday, and PeopleSoft Financials. Demonstrates ability to audit general technology controls in a variety of application environments.

On-Site Store and Distribution Center Audits

• Performs on-site physical inventory observations and other audit procedures at various stores
• Assists financial/operational audit team in performing Distribution Center audits
• Communicates audit findings and recommendations for improvement to Management via audit reports and closing meetings

System Implementations

• Executes test plans for the implementation which would include pre and post implementation testing.
• Assess technology and business user testing and documentation for adequacy and completeness.
• Recommends alternative policies, procedures, or efficiencies.

QUALIFICATIONS:

• Bachelor's Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies
• 1-3 years of experience total experience - 1+ years in public accounting and/or internal audit - 1+ years of previous experience within the retail accounting/finance/IT industries

VIRTUAL REQUIREMENTS:

At DICK'S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.

To ensure a smooth and secure experience, please note the following:

• Cameras must be on during all virtual interviews.
• AI tools are not permitted to be used by the candidate during any part of the interview process.
• Offers are contingent upon a satisfactory background check which may include ID verification.

If you have any questions or need accommodations, we're here to help. Thanks for helping us keep the process fair and secure for everyone!