General Position Summary:
Columbia Sportswear’s Global Audit & Risk Management team partners with leaders across the enterprise to protect and enhance company value through world-class risk management, audit, and advisory services. Columbia Sportswear Company has a dynamic and rapidly evolving IT environment. The Technology Auditor assists in the coordination and execution of Information Technology audit projects throughout the company, including. engagement and collaborates with Information Security, Data Privacy Digital Technology, Legal, and business stakeholders to understand the Company’s business, IT environments, and associated risks. 

The Technology Auditor will assist the Global Audit and Enterprise Risk Management Technology Team in executing audit procedures that support the evaluation of technology risks, including cybersecurity and data privacy. The Technology Auditor also plays an important role in aiding the strategic insight, advice, and guidance with respect to IT risk management, governance, policy, and operations, to support the broader GAERM team as influencers at all levels of the organization.  

What You Will Do:
•    Assist the IT Audit Senior Manager and Team in evaluating IT-related risks to support the development of annual audit plans 
•    Deliver a strong system and environmental infrastructure acumen to support IT driven and integrated operational audits to address areas such as cybersecurity, cloud infrastructure and data privacy risks. 
•    Deliver High-Impact Audits: Execute audits covering IT governance, cybersecurity, data privacy, identity and access management, change management and/or system development.
•    Conduct cybersecurity and privacy audits to address applicable state, federal, and international regulatory requirements.
•    Utilize technology-based audit tools that support audit work, such as AuditBoard, PowerBI, and AI
•    Utilize IT best practices and frameworks (i.e. ITIL, ISO, COBIT, NIST, and CIS) 
•    Coordinate and collaborate with key functional contacts in many business areas to provide assistance and input for various IT initiatives 
•    Effectively communicate across various cultures and global teams, ensuring an inclusive environment is maintained 
•    Collaborate with internal audit functions to assure that the testing of system development lifecycle controls meets compliance requirements and is effectively executed to support key stakeholder needs - Champion business process improvement throughout the organization 
•    Strong project/time management skills with the ability to handle and manage multiple priorities with a sense of urgency 
•    Communicate with Impact: Deliver clear, concise, and impactful findings to stakeholders in a timely and effective manner.
•    Uphold Company Values: Model a culture of accountability, collaboration, quality and continuous improvement.
•    Promote Integrity: Uphold the Global Internal Audit Standards and promote a culture of integrity across the organization.

Who You Will Work With:
This role reports to the Senior Manager of Technology - Global Audit & Enterprise Risk Management and serves as a trusted team member who plays a key role in collaborating with other Technology audit and digital technology team members to drive the Global Audit & Enterprise Risk Management strategic vision and objectives, ensuring best-in-class service and performance.

What You Bring:
•    Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field; or a business degree with significant IT risk experience.
•    2+ years of progressive experience in technology audit, risk management, cybersecurity, or compliance.
•    Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT).
•    Experience in testing and applying cybersecurity frameworks.
•    Experience with evaluating and testing privacy frameworks, such as state-driven privacy acts and regulations.
•    Familiarity with operating systems, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations.
•    Certifications: Should have achieved certification/s reflective of career achievements (e.g., CISA, CISSP, CISM, CRISC, CEH, CompTIA Security+).

Why Join Us:
Join a global, innovative organization where you’ll shape the future of technology risk management. Work on high-impact projects, collaborate with leaders across the enterprise, and help safeguard our digital ecosystem while enabling business growth.

#LI-JD1