Technology Risk Auditor

At DICK’S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.

If you are ready to make a difference as part of the world’s greatest sports team, apply to join our team today!

OVERVIEW:

As Dick’s Sporting Goods continues to grow and invest in its technology ecosystem, we’re expanding our Internal Audit team with several new Technology Internal Audit roles. These positions are part of our ongoing focus on strengthening our partnership with Technology to provide assurance and insights as they build for what’s next.

TheTechnology Risk Auditor will be a key member of the Internal Audit department and will be responsible forevaluating the effectiveness of technology processes and controls to mitigate technology risks, including processes over access management, change management, and technology operations. This teammate will add value to the Technology organization and broader Company by providing independent, objective, assuranceover the effectiveness of technology processes and controls.

JOB DUTIES & RESPONSIBILITIES

Technology and Integrated Audits

• Performs general technology and integrated audits, with a focus on infrastructure, cloud environments, application audits, application controls, and/or interface controls, as applicable to each audit

• Schedules and holds walk through meetings with auditees.

• Drafts request lists for audits and managesrequests to account for turnaround time and potential follow-up requests; monitors requests for completion and reviews received requests in a timely mannerto ensure it meets the audit objectives.

• Conducts technology and integrated audits to evaluate risks and controls within various technology environments by executing audit fieldwork to consider risks of the processes audited by preparing work programs and supporting work papers to support conclusions. Assiststeam in root cause analyses and exposure checks for issues identifiedand documents conclusions within audit work programs.

• Communicates with audit contacts on requests, follow-up questions, and discusses observations identifiedthrough fieldwork with Technology Internal Audit Manager, Senior Manager, and/or Director prior to discussing with auditee.

• Usesaudit engagement to develop or strengthen relationships with auditees.

• Conducts research and leveragesprior learnings/experiences to gain or leveragespecific knowledge sufficient to enable analysis of technology and related controls in key areas such as infrastructure, cloud environments, application audits, application controls, and/or interface controls.

Sarbanes-Oxley (SOX) and Internal Control Testing

• Interacts with auditees to gain an understanding of the technology processes and internal controls.

• Executes defined test steps to evaluate the controls, including technology general controls, application/interface, entity-level, and enterprise risk management. Documents independent, objective assessment of Management’s controls in audit work programs and prepares supporting work papers to support conclusions reached.

• Adequately prepares exceptionsupport and examples for findings and improvement opportunities.

• Versed in a variety of technologies including AS/400, Oracle, SQL Server Database, Unix, Windows, Active Directory, Workday, and PeopleSoft Financials. Demonstrates ability to audit general technology controls in a variety of application environments.

On-Site Store and Distribution Center Audits

• Performs on-site physical inventory observations and other audit procedures at various stores

• Assistsfinancial/operational audit team in performing Distribution Center audits

• Communicates audit findings and recommendations for improvement to Management via audit reports and closing meetings

System Implementations

• Executes test plans for the implementation which would include pre and post implementation testing.

• Assess technology and business user testing and documentation for adequacy and completeness.

• Recommends alternative policies, procedures, or efficiencies.

QUALIFICATIONS:

• Bachelor's Degree in Information Systems and Technology, Data Science, or Cybersecurity Studies

• 1-3 years of experiencetotal experience - 1+ years in public accounting and/or internal audit - 1+ years of previousexperience within the retail accounting/finance/IT industries

VIRTUAL REQUIREMENTS:

At DICK’S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.

To ensure a smooth and secure experience, please note the following:

• Cameras must be on during all virtual interviews.

• AI tools are not permitted to be used by the candidate during any part of the interview process.

• Offers are contingent upon a satisfactory background check which may include ID verification.

If you have any questions or need accommodations, we’re here to help. Thanks for helping us keep the process fair and secure for everyone!