IT Internal Auditor — SOX, Analytics & Automation

Expeditors; Factoria (WA); On-site; USD 90,000 - 115,000; Full time

Benefits offered by this job

Paid Vacation

Holidays

401(k) with employer match

ESPP

Health Savings Account

Parental Leave

Job summary

Expeditors International of Washington, Inc. seeks an IT Internal Auditor to join on-site at our Global Headquarters. The role focuses on planning and executing SOX ITGC and ITAC audits, with support for cybersecurity reviews and automation initiatives.

Ideal candidates have 1–3 years in IT auditing, IT risk, or cybersecurity and are comfortable building data analytics in Python/SQL and dashboards in Power BI to provide insights and continuous monitoring of control performance.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Data Analytics, Accounting, Finance, or a related field.
• 1-3 years of experience in IT auditing, IT risk, cybersecurity, or a related field, with exposure to SOX testing and compliance.
• Professional certifications such as CISA, CIA, CISSP, CISM, or CPA are preferred; candidates actively pursuing certification are encouraged to apply.
• Working knowledge of the COSO and COBIT frameworks.
• Understanding of SOX 404 requirements, ITGCs, and risk-based auditing methodologies.
• Experience with cybersecurity controls — IAM, privileged access, network and endpoint security, vulnerability and patch management, security monitoring and incident response, encryption and data protection, and cloud security (Azure/AWS/GCP) — with familiarity to NIST CSF, NIST 800-53, CIS Controls, or ISO 27001.

Responsibilities

• Execute IT audit testing focused on SOX controls, including ITGC and IT application controls.
• Assess the design and operating effectiveness of controls related to financial systems, data integrity, access management, change management, and IT operations.
• Evaluate cybersecurity controls — including IAM, privileged access, vulnerability/patch management, logging, data protection, and cloud security — against frameworks such as NIST CSF, CIS Controls, ISO 27001.
• Develop and maintain SOX testing documentation, including risk/control matrices, test plans, and workpapers.
• Identify control deficiencies and assist management in remediation planning and monitoring.
• Perform completeness and accuracy testing of Information Provided by Entity (IPE).
• Design and run data analytics over full populations using ERP, financial, and IT data to test controls and quantify findings.
• Build Python-based scripts and SQL queries to automate evidence collection, control testing, and workpaper prep.
• Develop dashboards and visualizations (Power BI) for ongoing risk visibility and control performance.
• Support automation efforts, including AI/ML applications for document review and risk assessment with governance and data privacy in mind.
• Assist with auditing AI usage and governance, including model and data controls and access monitoring.
• Maintain version control and reproducibility of analytics and automation code.
• Stay current on SOX, IT, cybersecurity, and AI risk developments.

Skills

Analytical skills

Communication

Attention to detail

Self-starter

Problem solving

Collaboration

Education

Bachelor’s degree in IS/CS/Data Analytics/Accounting/Finance

Tools

Python

SQL

Power BI

Job description

Expeditors International of Washington, Inc. seeks an IT Internal Auditor to join on-site at our Global Headquarters. The role focuses on planning and executing SOX ITGC and ITAC audits, with support for cybersecurity reviews and automation initiatives.

Ideal candidates have 1–3 years in IT auditing, IT risk, or cybersecurity and are comfortable building data analytics in Python/SQL and dashboards in Power BI to provide insights and continuous monitoring of control performance.