Technology Risk Auditor

At DICK'S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.

If you are ready to make a difference as part of the world's greatest sports team, apply to join our team today

OVERVIEW:

The Technology Risk Auditor will be a key member of the Internal Audit department and will be responsible for evaluating the effectiveness of technology processes and controls to mitigate technology risks, including processes over access management, change management, and technology operations. This teammate will add value to the Technology organization and broader Company by providing independent, objective, assurance over the effectiveness of technology processes and controls.

Technology and Integrated Audits

• Performs general technology and integrated audits, with a focus on infrastructure, cloud environments, application audits, application controls, and/or interface controls, as applicable to each audit

• Schedules and holds walk through meetings with auditees.

• Drafts request lists for audits and manages requests to account for turnaround time and potential follow-up requests; monitors requests for completion and reviews received requests in a timely manner to ensure it meets the audit objectives.

• Conducts technology and integrated audits to evaluate risks and controls within various technology environments by executing audit fieldwork to consider risks of the processes audited by preparing work programs and supporting work papers to support conclusions. Assists team in root cause analyses and exposure checks for issues identified and documents conclusions within audit work programs.

• Communicates with audit contacts on requests, follow-up questions, and discusses observations identified through fieldwork with Technology Internal Audit Manager, Senior Manager, and/or Director prior to discussing with auditee.

• Uses audit engagement to develop or strengthen relationships with auditees.

• Conducts research and leverages prior learnings/experiences to gain or leverage specific knowledge sufficient to enable analysis of technology and related controls in key areas such as infrastructure, cloud environments, application audits, application controls, and/or interface controls.

Sarbanes-Oxley (SOX) and Internal Control Testing

• Interacts with auditees to gain an understanding of the technology processes and internal controls.

• Executes defined test steps to evaluate the controls, including technology general controls, application/interface, entity-level, and enterprise risk management. Documents independent, objective assessment of Management's controls in audit work programs and prepares supporting work papers to support conclusions reached.

• Adequately prepares exception support and examples for findings and improvement opportunities.

• Versed in a variety of technologies including AS/400, Oracle, SQL Server Database, Unix, Windows, Active Directory, Workday, and PeopleSoft Financials. Demonstrates ability to audit general technology controls in a variety of application environments.

On-Site Store and Distribution Center Audits

• Performs on-site physical inventory observations and other audit procedures at various stores

• Assists financial/operational audit team in performing Distribution Center audits

• Communicates audit findings and recommendations for improvement to Management via audit reports and closing meetings

System Implementations

• Executes test plans for the implementation which would include pre and post implementation testing.

• Assess technology and business user testing and documentation for adequacy and completeness.

• Recommends alternative policies, procedures, or efficiencies.

QUALIFICATIONS:

• Bachelor's Degree

• BS in Information Systems and Technology, Data Science, or Cybersecurity Studies

• 1-3 years of experience

• Total years of experience - 1+; Total public accounting and/or internal audit years of experience - 1+; Previous experience within the retail accounting / finance / IT industry

• SOX and knowledge of general technology controls

#LI-SL1