Senior Information Technology (IT) Auditor

:

Senior Information Technology (IT) Auditor

(002299) Location : Downtown Seattle:: Organization : Internal Audit Employee Status : Regular Schedule : Full-time Posting Expires : Dec 7, 2025, 1:59:00 AM Minimum Salary : 104,603.00 MidPoint Salary : 130,749 Maximum Salary : 156,894.00

At the Port of Seattle, we anticipate making salary offers between the minimum and midpoint of the salary range. Offers will be based on experience similar to the Port job being applied for as well as a review of pay rates for Port employees performing similar work. Salary ranges are under review and subject to change.

Some of what you'll be doing:

As Senior Information Technology (IT) Auditor, you are a lead internal technical auditor whose work is leveraged by the Port's senior executives. You will plan and perform a range of independent and objective; risk-basked IT audits to increase oversight and accountability or IT technical controls at the Port.

• You will validate three objectives of information security (data confidentiality, integrity, and availability) by auditing the security controls, reliability, and vulnerability of Port systems.
• You will assist the IT Audit Manager in the development of the IT Audit Universe and an annual risk-based IT Audit Plan through the identification and evaluation of material risks and key controls, interviews of senior management, and those charged with governance, and published IT risk-based control frameworks.
• You will perform IT related audits including specialized cybersecurity audits that cover complex and highly technical subject matters.
• You will design risk-based test plans and audit programs to analyze and evaluate risks and controls for business processes used to support key business operations, information security, business and operational systems, networks, general computer controls, IT infrastructure, and other system related processes and risk areas.
• You will perform audit procedures using best auditing practices and evaluate whether the Port is complying with relevant laws and regulations, and conduct substantive/compliance tests based on assessed risks and criticality.
• You will develop comprehensive Audit Reports, including recommendations for corrective actions that improve the efficiency, effectiveness, and internal controls at the Port. You will present the Audit Report to Executive Management at closing meetings, Audit Committee at the Executive Session, or public meetings.
• You will perform follow-up procedures as necessary to determine the adequacy of the risk mitigation and tracking of audit finding action plan. You will coach and educate Port personnel regarding internal controls, accountability, and compliance to increase personnel knowledge of risk and expected outcomes.
• You will perform consulting and special projects, and other duties as assigned.
• You will be part of the Quality and Assurance (Q&A) team and perform Q&A reviews of the Audit Committee presentation materials on a quarterly basis.
• You will perform the Port's annual PCI-DSS (Payment Card Industry Data Security Standard) Compliance Assessment as the Port's ISA (Internal Security Assessor) or partner with the Port's external QSA (Qualified Security Assessor) on the assessment.
• You will maintain required continuous professional development, for certifications you maintain. Also, keep up to date with emerging technologies, industry trends, and regulatory requirements.

Who you are:

• Experienced - You have seven (7) years of progressive experience in public/private auditing in various fields such as financial, performance, operational, compliance, and accounting with two (2) years focused on IT Audits, IT security, IT controls and PCI.
• Educated - You possess a Bachelor's degree in Accounting, Business Administration, IT Security, IT Audit, or Finance. You also have one of the following certificates: Certified Information Systems Auditor (CISA) certification, a Certified Public Accountant (CPA) certification, or Certified Internal Auditor certification.
• Desired - We hope you have eight (8) or more years of progressive experience in public/private auditing in various fields with more than two (2) years focused on IT Audits, IT Security, IT Controls, and PCI. We also hope you have a Master's degree in Accounting, Finance, or Business Administration or IT Security and Internal Security Assessor (ISA) certifications.
• Committed to Equity - You will apply equity and exemplify shared values, behaviors, and practices in all aspects of the work. At the Port of Seattle, equity is a daily responsibility and a foundational expectation for all Port employees.
• Knowledgeable - You have extensive specialized knowledge of IT technology, cybersecurity, cyber defense, IT control frameworks and technical matter. You have experience in leading and supervising professional auditors, operational/performance risk assessments in governments, the application of the Red Book and the Yellow Book in the performance of an audit, and a thorough understanding of state and local government rules and regulations.
• Decisive and Problem Solver - You have excellent decision-making skills based on your professional judgment, knowledge in risk assessment, best practice controls and entity's risk tolerance level. You can add clarity in ambiguous situations and bring to rest any contradicting opinions to complex situations.
• Team Player - You can develop and maintain effective and professional relationships with all levels of management and staff. You are flexible and responsive to changing situations, have an ability to manage conflicts, and coordinate time efficiently to avoid conflicts.
• Critical Thinker - You are forward thinking and proactive and have the ability to critically evaluate information, question assumptions, and exercise professional judgment.
• Technologically Savvy - You have excellent technical skills in Microsoft Office products (Word, Excel, PowerPoint), complex Enterprise Resource Planning (ERP) such as PeopleSoft and audit management system (TeamMate). Knowledge of Information Technology concepts, including computer and network theory and security, malware control, disaster recovery theory, data loss prevention, mobile device management, Windows administration, software development, SQL, PeopleSoft, firewalls, and client/server technology. An in-depth knowledge of information security requirements (PCI, HIPAA, PII). Knowledge of SOX and CJIS security requirements would also contribute to success in this role.
• Communicative - You have excellent oral and writing skills, to ensure clarity in reports - distilling complex, technical IT audit results into language that is easily understood and instigate appropriate actions. You have presentation and public speaking skills and are able to present audit results at the Audit Committee (public meeting) and Executive Sessions (non-public setting).
• Payment Card Industry (PCI) audits - This position will have experience with and would be willing to take on and lead PCI required audits of the Port's Information Technology Controls. Accordingly, the individual will work towards obtaining an (Internal Security Assessor) ISA certification.

What else you need to know :

• Work Schedule - Your normal work schedule will be Monday - Friday, 8:00 a.m. to 5:00 p.m. (40 hours per week). Slightly more flexible start and end times are available in this role.
• Work Environment - This work will take place in a hybrid remote/in-office setting 3 days/week at the office and 2 days teleworking.
• Washington State Residency Requirement - Employees must establish a residence in Washington state within 30 days of their first day of employment and must maintain a residence in Washington State during their employment with the Port of Seattle. If a position is eligible to telework, work performed while teleworking must be performed in Washington State.
• Security Requirements - As the successful candidate, you must pass a Transportation Security Administration (TSA) background check as well as a criminal history background check with the Federal Bureau of Investigation (FBI). Your employment will be contingent upon obtaining a Port of Seattle ID badge upon clearance.
• Security Requirements - In this role, you will be required to access the Port of Seattle Police Department equipment, office locations, systems and/or vehicles. In compliance with Federal and State laws as the successful candidate, you will be required to pass a Criminal Justice Information Services (CJIS) criminal history background check.
• Grade Review - The pay range and grade for non-represented positions are under review and subject to change as part of the Port's work to implement a new pay program. This review is intended to ensure that positions are aligned with the new program that will be implemented in early 2024.

Why you'll love it here : The Port of Seattle offers an extensive benefits package that rewards our staff for their valuable contributions towards the Port‘s mission. In addition to the summary below, benefit details for non-represented positions can be found on the Port of Seattle‘s website. If the position is represented by a union, please refer to the “ Collective Bargaining Agreement ” or contact the appropriate Union Representative for specific information related to benefits and eligibility.

• Healthcare - Medical, Dental, and Vision Care with options that work for you and your family.
• Paid Vacation - Just about four weeks per year that increases with tenure to rest and rejuvenate.
• Paid Sick Leave - At least one hour of sick leave for every 40 hours worked.
• Holidays - More than ten days per year to celebrate with family and friends away from work.
• Pension/Retirement Plans - A pension and additional savings plans to prepare for your future after the Port.
• Getting to Work - From subsidized parking and a low-cost public transit card to alternative work arrangements giving you an opportunity to work from home.
• Parental Leave - Six weeks of paid leave to spend with new additions to your immediate family.
• Development - From tuition reimbursement, training, stretch assignments and internal internships, we support a learning culture.
• Equity, Diversity, and Inclusion - The Port of Seattle values diversity as a source of innovation and strength. We are actively working across the organization to create a culture where all employees - regardless of race, gender, and other identities - succeed and reach their fullest potential.
• Work-Life Balance - We provide the resources to help you create habits to be healthy and balanced.
• Mission Driven - We are focused together in promoting economic opportunities and quality of life in the region by advancing trade, travel, commerce, and job creation in an equitable, accountable, and environmentally responsible manner.

Why the Port of Seattle : Every role at the Port of Seattle is vital to our thriving community. We are a leader in moving people and cargo across the country and around the world. With facilities and property ranging in scope from a half-acre park to one of the largest airports and container terminals on the West Coast, we maximize the public assets in our portfolio with an eye toward best uses and environmental sustainability. Our vision is to create a Port that mirrors - throughout its breadth of operations and services and within its leadership - the diversity of our communities, instill principles of equity into its culture, and ensures a fair and intentional distribution of opportunities to expand economic develop and quality of life for all in our region. Find out more about how our values RAISE us up and our commitment to equity.