Lululemon

who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

about this team

Reporting to the VP, Global Risk Advisory Services, the Director, Technology Risk & Advisory Services is an inspiration to the team, provides training, coaching, and supervision. The Director will inform, lead and execute the technology, cyber and digital audits; data science strategy; and perform advanced-level internal auditing work. In particular, the Director will drive the determination of the audit focus related to technology, cyber and digital audits and data science focus and support related to all audits. They will play an important and dynamic leadership role in connecting with our technology and business partners. Additionally, the Director will provide consultative and advisory services to management and the various partners within the Company. As a liaison with Technology, Digital and Cyber Business Partners to ensure full understanding of technology strategy and operations, digital solutions, engineering, infrastructure management, cybersecurity and data flow & integrity.

key responsibilities

• Lead the annual Technology Internal Audit planning process, considering both internal and external business impacts.
• Act as a strategic partner to Technology Leadership, offering guidance and/or consultation on technology, digital and cyber risk and regulatory compliance. 
• Develop cost effective solutions with management to improve the effectiveness and efficiency of risk management 
• Manage a team, including external consultants, to conduct audits of the technology environment and related processes 
• Communicate audit results to various groups including the senior and department leaders, Senior Leadership Team (SLT) and Audit Committee
• Manage the preparation and issuance of audit reports to assure that all significant risk and improvement opportunities in internal controls are identified and that cost effective recommendations to address deficiencies are generated
• Develop and direct the data science, automation and AI strategy for the RAS function as a whole
• Direct the application of data analysis techniques to strengthen audit efficiency and effectiveness
• Collaborate with the broader Internal Audit team on technology-related audits.
• Ensure all work aligns with International Standards for Internal Auditing, maintaining high standards of integrity and confidentiality.

qualifications

• 15+ years of progressive technology and cybersecurity auditing/management experience
• CISA, CIA, CISSP or other applicable professional certifications required and maintained
• Extensive understanding and experience working with IT governance frameworks (i.e. COBIT, NIST, etc.)
• Experience working with cloud computing technologies (e.g. AWS, Azure etc.)
• Extensive experience with data analytics and automation tools (e.g. PowerBI, Alteryx, Databricks, SQL queries) 
• Willingness to travel across North America and internationally (~20%).
• Bachelor’s degree (preferably in MIS, Computer Science or Business Administration/Accounting with IS concentration)