IT Audit Manager- (Hybrid- Seattle, Washington)- Relocation Available

Nordstrom•Seattle, WA

1d•Hybrid

About The Position

Nordstrom Internal Audit enables the business by partnering across the enterprise to deliver objective, analytics-led assurance and advisory services that support the organization in improving governance, identifying efficiency, and driving growth. We are hiring a highly motivated individual contributor who excels in ambiguous, complex environments and delivers risk-based assurance, advisory, and data-driven actionable insights to internal stakeholders. You'll be instrumental in evaluating system implementations across waterfall, Agile, and DevOps environments while supporting Nordstrom's internal controls program inclusive of IT General Controls (ITGCs). This role follows a hybrid model, requiring four days per week onsite at our Seattle office to promote collaboration, professional development, and engagement with business partners.

Requirements

Bachelor's degree in Accounting, Finance, Information Systems, Computer Science, or related field (or equivalent education and work experience)
5+ years of progressive experience in IT Audit, IT Risk Management, IT Compliance, IT Project Management, or IT Assurance & Advisory Services
Proven expertise auditing or managing IT system implementations utilizing a variety of methodologies
Knowledge of COBIT, ISO, ITIL, NIST, and COSO frameworks
Familiarity using data analytics to provide value-added insights
Strong written and verbal skills with ability to convey technical concepts to non-technical audiences
Demonstrates a high level of ownership and accountability in all tasks while maintaining a strong commitment to delivering exceptional customer service

Nice To Haves

One or more professional certifications strongly preferred: CISA, CIA, CISSP, CISM, PMP, CSM/CSPO or equivalent

Responsibilities

Lead end-to-end integrated IT audit engagements of varying scope and complexity across diverse technology environments (on-premise, cloud, hybrid)
Assess system implementations and technology-enabled initiatives across diverse SDLC methodologies (waterfall, Agile, DevOps), evaluating controls from project inception through post-implementation
Perform walkthroughs, assess control design, test control operating effectiveness, evaluate impacts, and propose remediation solutions for ITGCs and automated business cycle controls
Apply risk-based methodologies and frameworks to identify control gaps, recommend practical, risk-appropriate solutions, and produce clear and executive-ready deliverables
Stay current on modern technologies (AI/ML, RPA, blockchain), industry trends, regulatory changes, and company strategies to maintain subject matter expertise
Build and maintain trusted relationships with business and technology partners, serving as a credible advisor on risk and control matters
Train and coach junior auditors to support their career development