IT Internal Auditor - SOX, Data Analytics & Cybersecurity

Expeditors

Bellevue (WA)

On-site

USD 90,000 - 130,000

Full time

6 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Paid Vacation

Holidays

Flexible Days

Paid Sick Time

401(k) Retirement Savings Plan

Employee Stock Purchase Plan

Medical, Prescription Drug, Dental & V

Vision Coverage

Health Savings Account (HSA)

Life and Disability Insurance

Parental Leave

Dependent Care FSA

Commuter Benefit

EAP

Training and Development

Educational Assistance

Job summary

Expeditors International of Washington, Inc. is seeking a full-time IT Internal Auditor based on-site at its Global Headquarters in Bellevue. You will plan and execute SOX ITGC/ITAC audits, support cybersecurity reviews, and drive analytics initiatives.

Ideal candidates have 1–3 years in IT audit or related fields and will work with cross-functional teams to strengthen controls over financial reporting. You will develop testing documentation, perform data analytics, and automate evidence

Qualifications

1-3 years of IT auditing, IT risk, cybersecurity, or related field with exposure to SOX testing and compliance.
Bachelor’s degree as listed or equivalent experience.
Professional certifications such as CISA, CIA, CISSP, CISM, or CPA preferred; pursuing certification encouraged.
Working knowledge of COSO and COBIT frameworks.
SOX 404, ITGCs, and risk-based auditing methodologies understood.
Experience with data analytics and scripting (Python/SQL); Power BI/Tableau preferred.
Exposure to automation/AI concepts in audit context.
Eligible to work in the United States.

Responsibilities

Execute IT audit testing focusing on SOX controls (ITGC/ITAC) and automated business process controls.
Assess design and operating effectiveness of controls around financial systems, data, access, changes, and IT operations.
Evaluate cybersecurity controls including IAM, privileged access, vulnerability management, logging, data protection, and cloud security.
Develop and maintain SOX testing documentation (RCMs, test plans, workpapers).
Identify control deficiencies, document findings, and monitor remediation with management.
Perform completeness/accuracy testing of IPE data.
Design data analytics over full populations using ERP/finance/IT data to test controls and identify anomalies.
Develop Python-based scripts to automate evidence collection and testing processes.