Senior Technology Risk Auditor

Senior Technology Risk Auditor

At DICK'S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.

If you are ready to make a difference as part of the world's greatest sports team, apply to join our team today!

Overview

The Senior Technology Risk Auditor will be a key member of the Internal Audit department and will be responsible for evaluating the effectiveness of internal processes and controls to mitigate technology, security, and business risks.

Job Duties & Responsibilities

Technology and Integrated Audits

• Performs general technology and integrated audits, with a focus on infrastructure, cloud environments, application audits, application controls, and / or interface controls, as applicable to each audit.
• Responsible for performing risk assessments and documenting processes for audit areas.
• Where applicable, partners with auditees to document process and data flows for areas under audit to use as a validation tool with the auditee to confirm understanding of the process and to document risks, control points, and scoping decisions.
• Schedules and holds walk-through meetings with auditees.
• Drafts request lists for audits and manages requests to account for turnaround time and potential follow-up requests; monitors requests for completion and reviews received requests in a timely manner to ensure they meet the audit objectives.
• Executes audit fieldwork to consider inherent risks of the processes audited. Assists team in root cause analyses and exposure checks for issues identified.
• Communicates with audit contacts on requests, follow-up questions, and discusses observations identified through fieldwork with the Technology Internal Audit Manager, Senior Manager, and / or Director prior to discussing with the auditee.
• Uses audit engagement to develop or strengthen relationships with auditees.
• Communicate audit results and recommendations for improvement to Management through formal audit reports and presentations that consider root causes, impact / exposure, and both near and long-term recommendations / solutions.

Specialized Risk Audits

Sarbanes-Oxley (SOX) and Internal Control Testing

On-Site Store and Distribution Center Audits

Qualifications