Senior IT Auditor — IT Controls & Healthcare Risk

FHLB Des Moines; Seattle (WA); Hybrid; USD 96,000 - 120,000; Full time

Benefits offered by this job

Flexible work schedule

Job summary

University of Washington in Seattle seeks a Senior IT Auditor to independently plan and perform IT risk-based audits across information security, IT operations, and governance. Responsibilities include data analytics, forensics, and supporting IT for Internal Audit.

The role reports to the IT Audit Manager and involves collaborating with multiple stakeholders. The position requires extensive IT control knowledge (COBIT, NIST, OWASP), strong analytical and communication skills, and the ability to

Qualifications

• Bachelor's degree required; five years of audit experience with at least three in IT audit.
• Professional certification such as CISA, CISSP, or CISM preferred.
• Ability to design and perform IT audits across multi-platform environments.

Responsibilities

• Independently performs information security and IT operations audits across diverse systems and technologies.
• Prepares IT audit plans, designs detailed work programs, and documents processes and controls.
• Develops audit findings, determines root causes, and makes actionable recommendations.
• Communicates audit results clearly, prepares reports, and follows up on remediation.
• Conducts IT support for Internal Audit and collaborates with other auditors on data extraction and analysis.

Skills

Information security

IT auditing

Data analytics

Forensics

Communication

Education

Bachelor's degree

Tools

ACL

Tableau

SQL

Job description

University of Washington in Seattle seeks a Senior IT Auditor to independently plan and perform IT risk-based audits across information security, IT operations, and governance. Responsibilities include data analytics, forensics, and supporting IT for Internal Audit.

The role reports to the IT Audit Manager and involves collaborating with multiple stakeholders. The position requires extensive IT control knowledge (COBIT, NIST, OWASP), strong analytical and communication skills, and the ability to