IT Internal Auditor

Become a member of a global community! The international logistics industry is an integral piece of the global trade puzzle; we make the world go round. Global supply chain management is what we do, and at the heart of Expeditors you will find professionalism, leadership, and a friendly environment, all of which foster an innovative, customer service-based approach to logistics. Expeditors is a global logistics company headquartered in Seattle, Washington. As a Fortune 500 company, we employ over 19,000 trained professionals in a worldwide network of over 350+ locations across six continents. Expeditors satisfies the increasingly sophisticated needs of international trade through customized solutions and seamless, integrated information systems. Our Mission is to recruit, train, and retain the very best logistics and technical experts the world over. We love to promote from within - more than 50 percent of our employees have been at Expeditors for five years or more. Our high retention rate is influenced by a unique compensation program for positions that are more than just jobs - they're chances to grow, do what you love and build a career with us! The Corporate Internal Audit Department of Expeditors International of Washington, Inc. is seeking a full-time IT Internal Auditor to be based on-site at its Global Headquarters reporting to the IT Internal Audit Manager. The role involves planning and executing audits of SOX IT General Controls (ITGCs) and IT Application Controls (ITACs) to provide independent assurance of SOX compliance, along with support for cybersecurity control reviews and the department’s data analytics and automation initiatives. This role is ideal for professionals with 1-3 years of experience in IT Audit or related fields. The IT Auditor will collaborate with cross-functional teams to evaluate the effectiveness of internal controls over financial reporting, identify risks, and recommend improvements to support compliance and operational excellence. Position responsibilities include, but are not limited to, the following: Execute IT audit testing with a focus on SOX controls, including IT General Controls (ITGC), IT Application controls, and automated business process controls. Assess the design and operating effectiveness of controls related to financial systems, data integrity, access management, change management, and IT operations. Evaluate cybersecurity controls — including identity and access management, privileged access, vulnerability and patch management, logging and monitoring, data protection, and third-party/cloud security — and assess alignment with recognized frameworks such as NIST CSF, CIS Controls, and ISO 27001. Develop and maintain SOX testing documentation, including risk and control matrices, test plans, and workpapers. Identify control deficiencies, prepare clear audit findings, and work with management to develop and monitor remediation plans. Perform completeness and accuracy testing of Information Provided by Entity (IPE). Design and perform data analytics over full populations rather than samples — including extracting, cleansing, joining, and reconciling data from ERP, financial, and IT systems to test controls, identify anomalies and outliers, and quantify audit findings. Build and maintain Python-based scripts and repeatable audit routines (for example, using pandas, SQL queries, and API/log data extracts) to automate evidence collection, control testing, sampling, and workpaper preparation. Develop continuous auditing and monitoring routines, dashboards, and visualizations (for example, Power BI) that provide ongoing insight into key risks and control performance. Support the Internal Audit organization’s automation efforts, including workflow automation and the practical application of artificial intelligence and machine learning — such as large language models for document and evidence review, risk assessment support, and audit documentation — with appropriate attention to accuracy, data privacy, and human review. Assist in auditing the company’s own use of AI and automation, including governance, model and data controls, access, and monitoring over AI-enabled and robotic process automation solutions. Maintain version control, documentation, and quality review over analytics and automation code so that results are accurate, reproducible, and auditable. Stay current on changes to SOX regulations, audit methodologies, and emerging IT, cybersecurity, and AI risks. Communicate audit results and recommendations to stakeholders, including IT management, IT Risk management, process owners, and external auditors. Support continuous improvement initiatives to strengthen the company’s control environment and audit processes. Assist with other IT audit projects and special assignments as needed. Experience Bachelor’s degree in Information Systems, Computer Science, Data Analytics, Accounting, Finance, or a related field. 1-3 years of experience in IT auditing, IT risk, cybersecurity, or a related field, with exposure to SOX testing and compliance. Professional certifications such as CISA, CIA, CISSP, CISM, or CPA are preferred; candidates actively pursuing certification are encouraged to apply. Working knowledge of the COSO and COBIT frameworks. Understanding of SOX 404 requirements, ITGCs, and risk-based auditing methodologies. Experience with cybersecurity controls — such as identity and access management, privileged access, network and endpoint security, vulnerability and patch management, security monitoring and incident response, encryption and data protection, and cloud security (Azure, AWS, or GCP) — and familiarity with NIST CSF, NIST 800-53, CIS Controls, or ISO 27001. Hands-on experience with data analytics and scripting, including Python and SQL; experience with data visualization tools such as Power BI or Tableau is preferred. Exposure to automation and artificial intelligence concepts — including robotic