IT Internal Auditor

About the Role

The Corporate Internal Audit Department of Expeditors International of Washington, Inc. is seeking a full-time IT Internal Auditor to be based on-site at its Global Headquarters, reporting to the IT Internal Audit Manager. This role involves planning and executing audits of SOX IT General Controls (ITGCs) and IT Application Controls (ITACs) to provide independent assurance of SOX compliance, along with support for cybersecurity control reviews and the department’s data analytics and automation initiatives.

Responsibilities

• Execute IT audit testing with a focus on SOX controls, including IT General Controls (ITGC), IT Application controls, and automated business process controls.
• Assess the design and operating effectiveness of controls related to financial systems, data integrity, access management, change management, and IT operations.
• Evaluate cybersecurity controls, including identity and access management, privileged access, vulnerability and patch management, logging and monitoring, data protection, and third-party/cloud security, and assess alignment with recognized frameworks such as NIST CSF, CIS Controls, and ISO 27001.
• Develop and maintain SOX testing documentation, including risk and control matrices, test plans, and workpapers.
• Identify control deficiencies, prepare clear audit findings, and work with management to develop and monitor remediation plans.
• Perform completeness and accuracy testing of Information Provided by Entity (IPE).
• Design and perform data analytics over full populations, including extracting, cleansing, joining, and reconciling data from ERP, financial, and IT systems to test controls, identify anomalies and outliers, and quantify audit findings.
• Build and maintain Python-based scripts and repeatable audit routines to automate evidence collection, control testing, sampling, and workpaper preparation.
• Develop continuous auditing and monitoring routines, dashboards, and visualizations to provide ongoing insight into key risks and control performance.
• Support the Internal Audit organization’s automation efforts, including workflow automation and the practical application of artificial intelligence and machine learning.
• Assist in auditing the company’s own use of AI and automation, including governance, model and data controls, access, and monitoring.
• Maintain version control, documentation, and quality review over analytics and automation code.
• Stay current on changes to SOX regulations, audit methodologies, and emerging IT, cybersecurity, and AI risks.
• Communicate audit results and recommendations to stakeholders.
• Support continuous improvement initiatives to strengthen the company’s control environment and audit processes.
• Assist with other IT audit projects and special assignments as needed.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Data Analytics, Accounting, Finance, or a related field.
• 1-3 years of experience in IT auditing, IT risk, cybersecurity, or a related field, with exposure to SOX testing and compliance.
• Professional certifications such as CISA, CIA, CISSP, CISM, or CPA are preferred; candidates actively pursuing certification are encouraged to apply.
• Working knowledge of the COSO and COBIT frameworks.
• Understanding of SOX 404 requirements, ITGCs, and risk-based auditing methodologies.
• Experience with cybersecurity controls and familiarity with NIST CSF, NIST 800-53, CIS Controls, or ISO 27001.
• Hands-on experience with data analytics and scripting, including Python and SQL; experience with data visualization tools such as Power BI or Tableau is preferred.
• Exposure to automation and artificial intelligence concepts and an interest in applying them to audit work.
• Experience with complex IT systems, ERP applications, and cloud environments preferred.
• Eligible to work in the United States.

Skills

• Excellent analytical, organizational, and written/verbal communication skills.
• Attention to detail and accuracy.
• Self-starter with a proactive mindset.
• Curiosity and a problem-solving mindset, with a willingness to learn new tools and technologies.
• Ability to work independently, manage multiple projects, and meet deadlines.
• Creative and flexible in responding to shifting workload requirements.
• Strong interpersonal skills, positive attitude, and a collaborative mindset.

Benefits

• Paid Vacation (first year prorated based on month of hire, then eligible for 15 days)
• Holidays (10)
• Flexible Days (2)
• Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
• 401(k) Retirement Savings Plan with employer match
• Employee Stock Purchase Plan (ESPP)
• Medical, Prescription Drug, Dental & Vision Coverage
• Health Savings Account (HSA)
• Life and Disability Insurance
• Paid Parental Leave (additional eligibility criteria)
• Dependent Care Flexible Spending Account (DC FSA)
• Commuter Benefit
• Employee Assistance Program (EAP)
• Training and Personnel Development Program
• Educational Assistance and Reimbursement

Job location: Onsite at our Bellevue, Federal Way, Lynnwood, or Seattle locations. Preferred locations are the Bellevue or Lynnwood offices.