Auditor, Technology – Global Audit & Enterprise Risk Management

Columbia Sportswear Company • Portland, OR

1d • Hybrid

About The Position

Columbia Sportswear’s Global Audit & Risk Management team partners with leaders across the enterprise to protect and enhance company value through world-class risk management, audit, and advisory services. Columbia Sportswear Company has a dynamic and rapidly evolving IT environment. The Technology Auditor assists in the coordination and execution of Information Technology audit projects throughout the company, including. engagement and collaborates with Information Security, Data Privacy Digital Technology, Legal, and business stakeholders to understand the Company’s business, IT environments, and associated risks. The Technology Auditor will assist the Global Audit and Enterprise Risk Management Technology Team in executing audit procedures that support the evaluation of technology risks, including cybersecurity and data privacy. The Technology Auditor also plays an important role in aiding the strategic insight, advice, and guidance with respect to IT risk management, governance, policy, and operations, to support the broader GAERM team as influencers at all levels of the organization.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field; or a business degree with significant IT risk experience.
• 2+ years of progressive experience in technology audit, risk management, cybersecurity, or compliance.
• Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT).
• Experience in testing and applying cybersecurity frameworks.
• Experience with evaluating and testing privacy frameworks, such as state-driven privacy acts and regulations.
• Familiarity with operating systems, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations.
• Certifications: Should have achieved certification/s reflective of career achievements (e.g., CISA, CISSP, CISM, CRISC, CEH, CompTIA Security+).

Responsibilities

• Assist the IT Audit Senior Manager and Team in evaluating IT-related risks to support the development of annual audit plans
• Deliver a strong system and environmental infrastructure acumen to support IT driven and integrated operational audits to address areas such as cybersecurity, cloud infrastructure and data privacy risks.
• Deliver High-Impact Audits: Execute audits covering IT governance, cybersecurity, data privacy, identity and access management, change management and/or system development.
• Conduct cybersecurity and privacy audits to address applicable state, federal, and international regulatory requirements.
• Utilize technology-based audit tools that support audit work, such as AuditBoard, PowerBI, and AI
• Utilize IT best practices and frameworks (i.e. ITIL, ISO, COBIT, NIST, and CIS)
• Coordinate and collaborate with key functional contacts in many business areas to provide assistance and input for various IT initiatives
• Effectively communicate across various cultures and global teams, ensuring an inclusive environment is maintained
• Collaborate with internal audit functions to assure that the testing of system development lifecycle controls meets compliance requirements and is effectively executed to support key stakeholder needs - Champion business process improvement throughout the organization
• Strong project/time management skills with the ability to handle and manage multiple priorities with a sense of urgency
• Communicate with Impact: Deliver clear, concise, and impactful findings to stakeholders in a timely and effective manner.
• Uphold Company Values: Model a culture of accountability, collaboration, quality and continuous improvement.
• Promote Integrity: Uphold the Global Internal Audit Standards and promote a culture of integrity across the organization.

Benefits

• 401k plan plus a generous company match
• medical, dental, vision, life Insurance, disability, flexible spending accounts, health savings account
• assortment of voluntary benefit offerings (accident, critical illness, hospital indemnity, and legal services)
• EAP + which is free and confidential 24/7/365 counseling services
• extensive wellness benefits
• employee discounts
• generous time off program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level