The Corporate Internal Audit Department of Expeditors International of Washington, Inc. is seeking a full-time IT Internal Auditor to be based on-site at its Global Headquarters reporting to the IT Internal Audit Manager. The role involves planning and executing audits of SOX IT General Controls (ITGCs) and IT Application Controls (ITACs) to provide independent assurance of SOX compliance, along with support for cybersecurity control reviews and the department’s data analytics and automation initiatives. This role is ideal for professionals with 1-3 years of experience in IT Audit or related fields. The IT Auditor will collaborate with cross-functional teams to evaluate the effectiveness of internal controls over financial reporting, identify risks, and recommend improvements to support compliance and operational excellence.
Position responsibilities include, but are not limited to, the following:
- Execute IT audit testing with a focus on SOX controls, including IT General Controls (ITGC), IT Application controls, and automated business process controls.
- Assess the design and operating effectiveness of controls related to financial systems, data integrity, access management, change management, and IT operations.
- Evaluate cybersecurity controls — including identity and access management, privileged access, vulnerability and patch management, logging and monitoring, data protection, and third-party/cloud security — and assess alignment with recognized frameworks such as NIST CSF, CIS Controls, and ISO 27001.
- Develop and maintain SOX testing documentation, including risk and control matrices, test plans, and workpapers.
- Identify control deficiencies, prepare clear audit findings, and work with management to develop and monitor remediation plans.
- Perform completeness and accuracy testing of Information Provided by Entity (IPE).
- Design and perform data analytics over full populations rather than samples — including extracting, cleansing, joining, and reconciling data from ERP, financial, and IT systems to test controls, identify anomalies and outliers, and quantify audit findings.
- Build and maintain Python-based scripts and repeatable audit routines (for example, using pandas, SQL queries, and API/log data extracts) to automate evidence collection, control testing, sampling, and workpaper preparation.
- Develop continuous auditing and monitoring routines, dashboards, and visualizations (for example, Power BI) that provide ongoing insight into key risks and control performance.
- Support the Internal Audit organization’s automation efforts, including workflow automation and the practical application of artificial intelligence and machine learning — such as large language models for document and evidence review, risk assessment support, and audit documentation — with appropriate attention to accuracy, data privacy, and human review.
- Assist in auditing the company’s own use of AI and automation, including governance, model and data controls, access, and monitoring over AI-enabled and robotic process automation solutions.
- Maintain version control, documentation, and quality review over analytics and automation code so that results are accurate, reproducible, and auditable.
- Stay current on changes to SOX regulations, audit methodologies, and emerging IT, cybersecurity, and AI risks.
- Communicate audit results and recommendations to stakeholders, including IT management, IT Risk management, process owners, and external auditors.
- Support continuous improvement initiatives to strengthen the company’s control environment and audit processes.
- Assist with other IT audit projects and special assignments as needed.
Experience
- Bachelor’s degree in Information Systems, Computer Science, Data Analytics, Accounting, Finance, or a related field.
- 1-3 years of experience in IT auditing, IT risk, cybersecurity, or a related field, with exposure to SOX testing and compliance.
- Professional certifications such as CISA, CIA, CISSP, CISM, or CPA are preferred; candidates actively pursuing certification are encouraged to apply.
- Working knowledge of the COSO and COBIT frameworks.
- Understanding of SOX 404 requirements, ITGCs, and risk-based auditing methodologies.
- Experience with cybersecurity controls — such as identity and access management, privileged access, network and endpoint security, vulnerability and patch management, security monitoring and incident response, encryption and data protection, and cloud security (Azure, AWS, or GCP) — and familiarity with NIST CSF, NIST 800-53, CIS Controls, or ISO 27001.
- Hands-on experience with data analytics and scripting, including Python and SQL; experience with data visualization tools such as Power BI or Tableau is preferred.
- Exposure to automation and artificial intelligence concepts — including robotic process automation, machine learning, or generative AI tools — and an interest in applying them to audit work.
- Experience with complex IT systems, ERP applications, and cloud environments preferred.
- Eligible to work in the United States.
Abilities and Skills
- Excellent analytical, organizational, and written/verbal communication skills, including the ability to explain technical and data-driven results to non-technical stakeholders.
- Attention to detail and accuracy.
- Self-starter who thinks ahead of the curve.
- Curiosity and a problem-solving mindset, with a willingness to learn new tools, languages, and technologies.
- Ability to work independently, manage multiple projects, and meet deadlines.
- Proactive commitment to follow through on assignments.
- Creative and flexible in responding to shifting workload requirements.
- Strong interpersonal skills, positive attitude, and a collaborative mindset.
A successful candidate must pass Expeditors’ pre-employment background check.
Expeditors offers excellent benefits:
- Paid Vacation (first year prorated based off month of hire then eligible for 15 days)
- Holidays (10)
- Flexible Days (2)
- Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
- 401(k) Retirement Savings Plan with employer match
- Employee Stock Purchase Plan (ESPP)
- Medical, Prescription Drug, Dental & Vision Coverage
- Health Savings Account (HSA)
- Life and Disability Insurance
- Paid Parental Leave (additional eligibility criteria)
- Dependent Care Flexible Spending Account (DC FSA)
- Commuter Benefit
- Employee Assistance Program (EAP)
- Training and Personnel Development Program
- Educational Assistance and Reimbursement
- All your information will be kept confidential according to EEO Guidelines.
Job location: Onsite at our Bellevue, Federal Way, Lynnwood or Seattle locations. Preferred
locations are the Bellevue or Lynnwood offices.