Program Manager (Is Audit) - Cybersecurity & Risk Management

“We’re not in the shipping business; we’re in the information business” -Peter Rose, Expeditors Founder

Global supply chain management is what we do, but at the heart of Expeditors you will find professionalism, leadership, and a friendly environment, all of which foster an innovative, customer service-based approach to logistics.

• 18,000 trained professionals
• 350+ locations worldwide across 60+ countries
• Fortune 500
• Globally unified systems

The Program Manager – IS Audit serves as a key interface in the Cybersecurity and Risk Management Portfolio in the IS department as an expert 2nd Line practitioner working with individuals with 1st Line internal controls responsibilities, our company's Internal Audit department as well as external auditors and third party risk of critical suppliers, with the goal of documenting and demonstrating compliance with our system of internal control, empowering and accelerating IS department audit programs through industry standard audit methodologies and providing systematic visibility to health and performance. The ideal candidate will have a strong depth of understanding of audit fundamentals, the COBIT framework and Internal Controls over financial reporting, with multiple years detailed Audit experience in a multinational, CISA certification preferred. Additionally, this role will be filled by an excellent communicator with detailed project management and analytic capabilities, with the ability to communicate critical audit matters to management, identify trends and avoid issues.

This position is on-site and will reside in the greater Seattle, WA. area at one of the following locations depending on availability. Candidates must be local or willing to relocate. Relocation assistance is not offered for this position.

• Downtown Seattle
• Federal Way
• Lynnwood
• Bellevue (Factoria)

MINIMUM QUALIFICATIONS

• Maintain list of all risks, controls and procedures related to the department's audit activities, work with control performers and risk owners to ensure timeliness and accuracy of results and successful completion of audit.
• Support interim and final IS audit procedures around IT general and application controls and provide support on the completion of these procedures, meeting with the internal and external auditors frequently toward the end of audit periods.
• Assist with identifying and assessing IS risk & relevant controls, including participation in annual risk and control reviews.
• Review and perform QA over audit evidence, relevant processes, and procedural documentation before submitting to the auditors.
• Facilitate internal and external audit walkthroughs of IT controls alongside process/control owners.
• Assist and support 1st Line with identifying and documenting issues identified during audit and developing remediation plans for improvement.
• Documenting, managing and maintaining IS audit programs, procedures and artifacts.
• Ensuring control performers' and risk owners' understanding of control objectives, artifacts and control health.
• Measuring and identifying cybersecurity risk associated with critical clients and suppliers.

DESIRED QUALIFICATIONS

• Bachelor's degree in Information Systems, Accounting, Business, or in a relevant field.
• Understanding of and experience with the Sarbanes-Oxley (SOX) compliance requirements, the COSO and COBIT frameworks and the Governance, Risk and Compliance (GRC) management models.
• Understanding NIST Cybersecurity frameworks, CMMC.
• Critical thinking/problem solving skills.
• Strong verbal and written communication skills.
• Excellent project management skills.
• Data visualization skills for highlighting and trending control performance.
• High level of ownership, accountability and initiative.
• Knowledge of the basic nature of auditing, enterprise IT environment and information system concepts, and IT audit principles and practices a plus.
• Certification preferred (CISA, CPA, CIA).
• 3+ years IT audit experience, through public accounting/auditing and/or industry experience.

Applicants are required to be eligible to lawfully work in the U.S. immediately; employer will not transfer or sponsor applicants for U.S. work authorization (such as an H-1B visa) for this opportunity.

Expected base salary: $80,000 to $145,000

Expeditors offers excellent benefits:

• Paid Vacation (first year prorated based off month of hire then eligible for 15 days)
• Holidays (10)
• Flexible Days (2)
• Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
• 401(k) Retirement Savings Plan with employer match
• Employee Stock Purchase Plan (ESPP)
• Medical, Prescription Drug, Dental & Vision Coverage
• Health Savings Account (HSA)
• Life and Disability Insurance
• Paid Parental Leave (additional eligibility criteria)
• Dependent Care Flexible Spending Account (DC FSA)
• Commuter Benefit
• Employee Assistance Program (EAP)
• Training and Personnel Development Program
• Educational Assistance and Reimbursement
• Position is full time (40 hours per week) Monday through Friday
• Business professional dress code

All your information will be kept confidential according to EEO Guidelines.