IT Internal Auditor

Expeditors; Factoria (WA); On-site; USD 90,000 - 115,000; Full time

Benefits offered by this job

Paid Vacation

Holidays

401(k) with employer match

ESPP

Health Savings Account

Parental Leave

Job summary

Expeditors International of Washington, Inc. seeks an IT Internal Auditor to join on-site at our Global Headquarters. The role focuses on planning and executing SOX ITGC and ITAC audits, with support for cybersecurity reviews and automation initiatives.

Ideal candidates have 1–3 years in IT auditing, IT risk, or cybersecurity and are comfortable building data analytics in Python/SQL and dashboards in Power BI to provide insights and continuous monitoring of control performance.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Data Analytics, Accounting, Finance, or a related field.
• 1-3 years of experience in IT auditing, IT risk, cybersecurity, or a related field, with exposure to SOX testing and compliance.
• Professional certifications such as CISA, CIA, CISSP, CISM, or CPA are preferred; candidates actively pursuing certification are encouraged to apply.
• Working knowledge of the COSO and COBIT frameworks.
• Understanding of SOX 404 requirements, ITGCs, and risk-based auditing methodologies.
• Experience with cybersecurity controls — IAM, privileged access, network and endpoint security, vulnerability and patch management, security monitoring and incident response, encryption and data protection, and cloud security (Azure/AWS/GCP) — with familiarity to NIST CSF, NIST 800-53, CIS Controls, or ISO 27001.

Responsibilities

• Execute IT audit testing focused on SOX controls, including ITGC and IT application controls.
• Assess the design and operating effectiveness of controls related to financial systems, data integrity, access management, change management, and IT operations.
• Evaluate cybersecurity controls — including IAM, privileged access, vulnerability/patch management, logging, data protection, and cloud security — against frameworks such as NIST CSF, CIS Controls, ISO 27001.
• Develop and maintain SOX testing documentation, including risk/control matrices, test plans, and workpapers.
• Identify control deficiencies and assist management in remediation planning and monitoring.
• Perform completeness and accuracy testing of Information Provided by Entity (IPE).
• Design and run data analytics over full populations using ERP, financial, and IT data to test controls and quantify findings.
• Build Python-based scripts and SQL queries to automate evidence collection, control testing, and workpaper prep.
• Develop dashboards and visualizations (Power BI) for ongoing risk visibility and control performance.
• Support automation efforts, including AI/ML applications for document review and risk assessment with governance and data privacy in mind.
• Assist with auditing AI usage and governance, including model and data controls and access monitoring.
• Maintain version control and reproducibility of analytics and automation code.
• Stay current on SOX, IT, cybersecurity, and AI risk developments.

Skills

Analytical skills

Communication

Attention to detail

Self-starter

Problem solving

Collaboration

Education

Bachelor’s degree in IS/CS/Data Analytics/Accounting/Finance

Tools

Python

SQL

Power BI

Job description

• Compensation: USD 90,000 - USD 115,000 - yearly

Company Description

Become a member of a global community! The international logistics industry is an integral piece of the global trade puzzle; we make the world go round. Global supply chain management is what we do, and at the heart of Expeditors you will find professionalism, leadership, and a friendly environment, all of which foster an innovative, customer service-based approach to logistics. Expeditors is a global logistics company headquartered in Seattle, Washington. As a Fortune 500 company, we employ over 19,000 trained professionals in a worldwide network of over 350+ locations across six continents. Expeditors satisfies the increasingly sophisticated needs of international trade through customized solutions and seamless, integrated information systems.

Our Mission is to recruit, train, and retain the very best logistics and technical experts the world over. We love to promote from within - more than 50 percent of our employees have been at Expeditors for five years or more. Our high retention rate is influenced by a unique compensation program for positions that are more than just jobs - they're chances to grow, do what you love and build a career with us!

Job Description

The Corporate Internal Audit Department of Expeditors International of Washington, Inc. is seeking a full-time IT Internal Auditor to be based on-site at its Global Headquarters reporting to the IT Internal Audit Manager. The role involves planning and executing audits of SOX IT General Controls (ITGCs) and IT Application Controls (ITACs) to provide independent assurance of SOX compliance, along with support for cybersecurity control reviews and the department’s data analytics and automation initiatives. This role is ideal for professionals with 1-3 years of experience in IT Audit or related fields. The IT Auditor will collaborate with cross-functional teams to evaluate the effectiveness of internalcontrols over financial reporting, identify risks, and recommend improvements to supportcompliance and operational excellence.

Position responsibilities include, but are not limited to, the following:

• Execute IT audit testing with a focus on SOX controls, including IT General Controls (ITGC), ITApplication controls, and automated business process controls.
• Assess the design and operating effectiveness of controls related to financial systems, dataintegrity, access management, change management, and IT operations.
• Evaluate cybersecurity controls — including identity and access management, privilegedaccess, vulnerability and patch management, logging and monitoring, data protection, andthird-party/cloud security — and assess alignment with recognized frameworks such as NISTCSF, CIS Controls, and ISO 27001.
• Develop and maintain SOX testing documentation, including risk and control matrices, testplans, and workpapers.
• Identify control deficiencies, prepare clear audit findings, and work with management todevelop and monitor remediation plans.
• Perform completeness and accuracy testing of Information Provided by Entity (IPE).
• Design and perform data analytics over full populations rather than samples — includingextracting, cleansing, joining, and reconciling data from ERP, financial, and IT systems to testcontrols, identify anomalies and outliers, and quantify audit findings.
• Build and maintain Python-based scripts and repeatable audit routines (for example, usingpandas, SQL queries, and API/log data extracts) to automate evidence collection, controltesting, sampling, and workpaper preparation.
• Develop continuous auditing and monitoring routines, dashboards, and visualizations (forexample, Power BI) that provide ongoing insight into key risks and control performance.
• Support the Internal Audit organization’s automation efforts, including workflow automationand the practical application of artificial intelligence and machine learning — such as largelanguage models for document and evidence review, risk assessment support, and auditdocumentation — with appropriate attention to accuracy, data privacy, and human review.
• Assist in auditing the company’s own use of AI and automation, including governance, modeland data controls, access, and monitoring over AI-enabled and robotic process automationsolutions.
• Maintain version control, documentation, and quality review over analytics and automationcode so that results are accurate, reproducible, and auditable.
• Stay current on changes to SOX regulations, audit methodologies, and emerging IT,cybersecurity, and AI risks.
• Communicate audit results and recommendations to stakeholders, including ITmanagement, IT Risk management, process owners, and external auditors.
• Support continuous improvement initiatives to strengthen the company’s controlenvironment and audit processes.
• Assist with other IT audit projects and special assignments as needed.

Qualifications

Experience

• Bachelor’s degree in Information Systems, Computer Science, Data Analytics, Accounting, Finance, or a related field.
• 1-3 years of experience in IT auditing, IT risk, cybersecurity, or a related field, with exposure to SOX testing and compliance.
• Professional certifications such as CISA, CIA, CISSP, CISM, or CPA are preferred; candidates actively pursuing certification are encouraged to apply.
• Working knowledge of the COSO and COBIT frameworks.
• Understanding of SOX 404 requirements, ITGCs, and risk-based auditing methodologies.
• Experience with cybersecurity controls — such as identity and access management, privileged access, network and endpoint security, vulnerability and patch management, security monitoring and incident response, encryption and data protection, and cloud security (Azure, AWS, or GCP) — and familiarity with NIST CSF, NIST 800-53, CIS Controls, or ISO 27001.
• Hands-on experience with data analytics and scripting, including Python and SQL; experience with data visualization tools such as Power BI or Tableau is preferred.
• Exposure to automation and artificial intelligence concepts — including robotic process automation, machine learning, or generative AI tools — and an interest in applying them to audit work.
• Experience with complex IT systems, ERP applications, and cloud environments preferred.
• Eligible to work in the United States.

Abilities and Skills

• Excellent analytical, organizational, and written/verbal communication skills, including the ability to explain technical and data-driven results to non-technical stakeholders.
• Attention to detail and accuracy.
• Self-starter who thinks ahead of the curve.
• Curiosity and a problem-solving mindset, with a willingness to learn new tools, languages, and technologies.
• Ability to work independently, manage multiple projects, and meet deadlines.
• Proactive commitment to follow through on assignments.
• Creative and flexible in responding to shifting workload requirements.
• Strong interpersonal skills, positive attitude, and a collaborative mindset.

Additional Information

A successful candidate must pass Expeditors’ pre-employment background check.

Expeditors offers excellent benefits:

• Paid Vacation (first year prorated based off month of hire then eligible for 15 days)
• Holidays (10)
• Flexible Days (2)
• Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
• 401(k) Retirement Savings Plan with employer match
• Employee Stock Purchase Plan (ESPP)
• Health Savings Account (HSA)
• Life and Disability Insurance
• Paid Parental Leave (additional eligibility criteria)
• Dependent Care Flexible Spending Account (DC FSA)
• Employee Assistance Program (EAP)
• Training and Personnel Development Program
• Educational Assistance and Reimbursement
• All your information will be kept confidential according to EEO Guidelines.

Job location: Onsite at our Bellevue, Federal Way, Lynnwood or Seattle locations. Preferred
locations are the Bellevue or Lynnwood offices.