Internal IT Auditor/Senior

Senior Information Technology (IT) Auditor

(Downtown Seattle:: Organization : Internal Audit Employee Status : Regular Schedule : Full-time Posting Expires : Dec 7, 2025, 1:59:00 AM Minimum Salary : 104,603.00 MidPoint Salary : 130,749 Maximum Salary : 156,894.00 At the Port of Seattle, we anticipate making salary offers between the minimum and midpoint of the salary range. As Senior Information Technology (IT) Auditor, you are a lead internal technical auditor whose work is leveraged by the Port's senior executives. risk-basked IT audits to increase oversight and accountability or IT technical controls at the Port.

You will validate three objectives of information security (data confidentiality, integrity, and availability) by auditing the security controls, reliability, and vulnerability of Port systems.

You will assist the IT Audit Manager in the development of the IT Audit Universe and an annual risk-based IT Audit Plan through the identification and evaluation of material risks and key controls, interviews of senior management, and those charged with governance, and published IT risk-based control frameworks.

You will perform IT related audits including specialized cybersecurity audits that cover complex and highly technical subject matters.

You will design risk-based test plans and audit programs to analyze and evaluate risks and controls for business processes used to support key business operations, information security, business and operational systems, networks, general computer controls, IT infrastructure, and other system related processes and risk areas.

You will perform audit procedures using best auditing practices and evaluate whether the Port is complying with relevant laws and regulations, and conduct substantive/compliance tests based on assessed risks and criticality.

You will develop comprehensive Audit Reports, including recommendations for corrective actions that improve the efficiency, effectiveness, and internal controls at the Port. You will present the Audit Report to Executive Management at closing meetings, Audit Committee at the Executive Session, or public meetings.

You will perform follow-up procedures as necessary to determine the adequacy of the risk mitigation and tracking of audit finding action plan. You will coach and educate Port personnel regarding internal controls, accountability, and compliance to increase personnel knowledge of risk and expected outcomes.

You will perform consulting and special projects, and other duties as assigned.

You will be part of the Quality and Assurance (Q&A) team and perform Q&A reviews of the Audit Committee presentation materials on a quarterly basis.

You will perform the Port's annual PCI-DSS (Payment Card Industry Data Security Standard) Compliance Assessment as the Port's ISA (Internal Security Assessor) or partner with the Port's external QSA (Qualified Security Assessor) on the assessment.

Also, keep up to date with emerging technologies, industry trends, and regulatory requirements.

Experienced - You have seven (7) years of progressive experience in public/private auditing in various fields such as financial, performance, operational, compliance, and accounting with two (2) years focused on IT Audits, IT security, IT controls and PCI.

Educated - You possess a Bachelor's degree in Accounting, Business Administration, IT Security, IT Audit, or Finance. Certified Information Systems Auditor (CISA) certification, a Certified Public Accountant (CPA) certification, or Certified Internal Auditor certification.

Desired - We hope you have eight (8) or more years of progressive experience in public/private auditing in various fields with more than two (2) years focused on IT Audits, IT Security, IT Controls, and PCI. We also hope you have a Master's degree in Accounting, Finance, or Business Administration or IT Security and Internal Security Assessor (ISA) certifications.

Committed to Equity - You will apply equity and exemplify shared values, behaviors, and practices in all aspects of the work. At the Port of Seattle, equity is a daily responsibility and a foundational expectation for all Port employees.

Knowledgeable - You have extensive specialized knowledge of IT technology, cybersecurity, cyber defense, IT control frameworks and technical matter. You have experience in leading and supervising professional auditors, operational/performance risk assessments in governments, the application of the Red Book and the Yellow Book in the performance of an audit, and a thorough understanding of state and local government rules and regulations.

Decisive and Problem Solver - You have excellent decision-making skills based on your professional judgment, knowledge in risk assessment, best practice controls and entity's risk tolerance level. You are flexible and responsive to changing situations, have an ability to manage conflicts, and coordinate time efficiently to avoid conflicts.

Technologically Savvy - You have excellent technical skills in Microsoft Office products (Word, Excel, PowerPoint), complex Enterprise Resource Planning (ERP) such as PeopleSoft and audit management system (TeamMate). Knowledge of Information Technology concepts, including computer and network theory and security, malware control, disaster recovery theory, data loss prevention, mobile device management, Windows administration, software development, SQL, PeopleSoft, firewalls, and client/server technology. An in-depth knowledge of information security requirements (PCI, HIPAA, PII). Communicative - You have excellent oral and writing skills, to ensure clarity in reports - distilling complex, technical IT audit results into language that is easily understood and instigate appropriate actions. You have presentation and public speaking skills and are able to present audit results at the Audit Committee (public meeting) and Executive Sessions (non-public setting).

Payment Card Industry (PCI) audits - This position will have experience with and would be willing to take on and lead PCI required audits of the Port's Information Technology Controls. Work Schedule - Your normal work schedule will be Monday - Friday, 8:00 a.m. Slightly more flexible start and end times are available in this role.

Work Environment - This work will take place in a hybrid remote/in-office setting 3 days/week at the office and 2 days teleworking.

If a position is eligible to telework, work performed while teleworking must be performed in Washington State.

Security Requirements - As the successful candidate, you must pass a Transportation Security Administration (TSA) background check as well as a criminal history background check with the Federal Bureau of Investigation (FBI). Security Requirements - In this role, you will be required to access the Port of Seattle Police Department equipment, office locations, systems and/or vehicles. In addition to the summary below, benefit details for non-represented positions can be found on the Port of Seattle‘s website. If the position is represented by a union, please refer to the “ Collective Bargaining Agreement ” or contact the appropriate Union Representative for specific information related to benefits and eligibility.

Healthcare - Medical, Dental, and Vision Care with options that work for you and your family.

Holidays - More than ten days per year to celebrate with family and friends away from work.

Pension/Retirement Plans - A pension and additional savings plans to prepare for your future after the Port.

Getting to Work - From subsidized parking and a low-cost public transit card to alternative work arrangements giving you an opportunity to work from home.

Parental Leave - Six weeks of paid leave to spend with new additions to your immediate family.

Development - From tuition reimbursement, training, stretch assignments and internal internships, we support a learning culture.

Equity, Diversity, and Inclusion - The Port of Seattle values diversity as a source of innovation and strength. Work-Life Balance - We provide the resources to help you create habits to be healthy and balanced.

Mission Driven - We are focused together in promoting economic opportunities and quality of life in the region by advancing trade, travel, commerce, and job creation in an equitable, accountable, and environmentally responsible manner.

Every role at the Port of Seattle is vital to our thriving community. With facilities and property ranging in scope from a half-acre park to one of the largest airports and container terminals on the West Coast, we maximize the public assets in our portfolio with an eye toward best uses and environmental sustainability. Our vision is to create a Port that mirrors - throughout its breadth of operations and services and within its leadership - the diversity of our communities, instill principles of equity into its culture, and ensures a fair and intentional distribution of opportunities to expand economic develop and quality of life for all in our region. Find out more about how our values RAISE us up and our commitment to equity.