This position is designated as a hybrid role based out of our headquarters near Portland, Oregon. The current expectation is for employees to work onsite four days per week, subject to change based on business needs. This in-office requirement may be adjusted at the discretion of the company.

OUTGROWN YOUR OWN BACKYARD?

COME

PLAY IN OURS.

At Columbia, we're as passionate about the outdoors as you are. And while our gear is available worldwide, we're proud to be based in the Pacific Northwest, where natural wonders are our playground. Every product we make and every task we undertake is inspired by the famous words of our founder

Gert Boyle:

"It's perfect. Now make it better." As pioneers of relentless improvement, we are constantly evolving. We believe the outdoors is ours to protect and strive to keep our planet healthy. We believe in empowering people to experience the outdoors to the fullest. And we believe in you.

General Position Summary:

Columbia Sportswear's Global Audit & Risk Management team partners with leaders across the enterprise to protect and enhance company value through world-class risk management, audit, and advisory services. Columbia Sportswear Company has a dynamic and rapidly evolving IT environment. The Technology Auditor assists in the coordination and execution of Information Technology audit projects throughout the company, including. engagement and collaborates with Information Security, Data Privacy Digital Technology, Legal, and business stakeholders to understand the Company's business, IT environments, and associated risks. The Technology Auditor will assist the Global Audit and Enterprise Risk Management Technology Team in executing audit procedures that support the evaluation of technology risks, including cybersecurity and data privacy. The Technology Auditor also plays an important role in aiding the strategic insight, advice, and guidance with respect to IT risk management, governance, policy, and operations, to support the broader GAERM team as influencers at all levels of the organization.

What You Will Do:

• Assist the IT Audit Senior Manager and Team in evaluating IT-related risks to support the development of annual audit plans
• Deliver a strong system and environmental infrastructure acumen to support IT driven and integrated operational audits to address areas such as cybersecurity, cloud infrastructure and data privacy risks.

Deliver High-Impact Audits:

Execute audits covering IT governance, cybersecurity, data privacy, identity and access management, change management and/or system development.

• Conduct cybersecurity and privacy audits to address applicable state, federal, and international regulatory requirements.
• Utilize technology-based audit tools that support audit work, such as AuditBoard, PowerBI, and AI
• Utilize IT best practices and frameworks (i.e. ITIL, ISO, COBIT, NIST, and CIS)
• Coordinate and collaborate with key functional contacts in many business areas to provide assistance and input for various IT initiatives
• Effectively communicate across various cultures and global teams, ensuring an inclusive environment is maintained
• Collaborate with internal audit functions to assure that the testing of system development lifecycle controls meets compliance requirements and is effectively executed to support key stakeholder needs - Champion business process improvement throughout the organization
• Strong project/time management skills with the ability to handle and manage multiple priorities with a sense of urgency
• Communicate with

Impact:

Deliver clear, concise, and impactful findings to stakeholders in a timely and effective manner.

Uphold Company Values:

Model a culture of accountability, collaboration, quality and continuous improvement.

Promote Integrity:

Uphold the Global Internal Audit Standards and promote a culture of integrity across the organization.

Who You Will Work With:

This role reports to the Senior Manager of Technology - Global Audit & Enterprise Risk Management and serves as a trusted team member who plays a key role in collaborating with other Technology audit and digital technology team members to drive the Global Audit & Enterprise Risk Management strategic vision and objectives, ensuring best-in-class service and performance.

What You Bring:

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field; or a business degree with significant IT risk experience.
• 2+ years of progressive experience in technology audit, risk management, cybersecurity, or compliance.
• Strong knowledge of cybersecurity principles and IT control frameworks (NIST, ISO, COBIT).
• Experience in testing and applying cybersecurity frameworks.
• Experience with evaluating and testing privacy frameworks, such as state-driven privacy acts and regulations.
• Familiarity with operating systems, databases, cloud platforms, enterprise architecture, and digital commerce risk considerations.

Certifications:

Should have achieved certification/s reflective of career achievements (e.g., CISA, CISSP, CISM, CRISC, CEH, CompTIA Security+).

Why Join Us:

Join a global, innovative organization where you'll shape the future of technology risk management. Work on high-impact projects, collaborate with leaders across the enterprise, and help safeguard our digital ecosystem while enabling business growth. #LI-JD1 This job description is not meant to be an all-inclusive list of duties and responsibilities, but constitutes a general definition of the position's scope and function in the company. Columbia Sportswear Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Columbia Sportswear is committed to working with and providing reasonable accommodation for individuals with disabilities.

https:

//www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf. If you need reasonable accommodation because of a disability for any part of the employment process, please notify your recruiter. At Columbia Sportswear Company, we're proud to offer regular full-time employees a benefits package that includes a variety of services and products to help make your life and work more rewarding. Our benefit programs contribute to overall employee well-being by aligning those programs with the fundamental elements of well-being: physical, social/emotional, financial, career and community. Benefits that can protect your family's financial future and help you save money through our 401k plan plus a generous company match. Columbia offers medical, dental, vision, life Insurance, disability, flexible spending accounts, health savings account, and an assortment of voluntary benefit offerings (accident, critical illness, hospital indemnity, and legal services). In addition, Columbia offers EAP + which is free and confidential 24/7/365 counseling services. We have extensive wellness benefits, employee discounts and a generous time off program available. If you need an accommodation/adjustment to successfully complete and submit your application, please reach out to AskHR@columbia.com with the

Subject:

Applicant Assistance Requested.