Department:
Internal AuditOur Company Promise
We are committed to provide our Employees a stable work environment with equal opportunity for learning and personal growth. Creativity and innovation are encouraged for improving the effectiveness of Southwest Airlines. Above all, Employees will be provided the same concern, respect, and caring attitude within the organization that they are expected to share externally with every Southwest Customer.
Job Description:
As a Senior IT Internal Auditor, you’ll provide independent, risk‑based assurance and advisory services across Southwest’s technology processes and systems. Using an Agile audit approach, you’ll assess significant and emerging IT risks, evaluate the effectiveness of governance and controls, and deliver practical insights that help Leaders make informed decisions. You’ll have the flexibility to shift focus as risks evolve and tailor audits to areas of greatest business impact. This role offers broad exposure across the IT risk landscape while working in a collaborative audit environment focused on continuous improvement, critical thinking, and clear communication.
Additional Details
The culture of Southwest Airlines means we value the camaraderie, collaboration, and innovation that occurs when we come together and interact face-to-face at our vibrant Corporate Campus. Due to the nature of this role, you would be required to work from our Dallas, TX Headquarters facility during business hours.
U.S. citizenship or current authorization to work in the U.S. required and no current or future work authorization sponsorship available.
We’re committed to fair hiring practices and to making employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, disability, genetic information, or other legally protected characteristics.
Responsibilities
Review and evaluate areas such as information systems, data security, data integrity, operating systems, operations management to determine they are adequate and effectively maintained
Identify and communicate meaningful, value-added solutions to business risks
Appraise the effectiveness of existing policies, procedures, and business practices, and continuously challenge their effectiveness
Develop and effectively communicate feasible recommendations to identified business risks
Demonstrate deep expertise in technology domains, including information systems, cybersecurity, and data integrity, to effectively assess and audit IT controls, identify potential risks, and provide informed recommendations for enhancing technological safeguards and processes.
Develop and execute audit plans and programs to achieve audit objectives and in accordance with accepted professional standards
Prepare, maintain, and review audit workpapers pertinent to the audit’s coverage and findings
Utilize strong project management skills to establish clear deadlines, communicate detailed audit plans to team members and stakeholders, and ensure timely completion of engagements while maintaining high-quality standards.
Validate findings by thoroughly verifying the accuracy and relevance of data, ensuring that conclusions are supported by robust evidence and adhering to industry standards and best practices
Interpret and comprehend the meaning of test results as they relate to internal control strengths and weaknesses
Represent the Internal Audit Department on assignments and prepare oral and written presentations to management during and at the conclusion of the assignments
Conduct and direct special assignments as requested by the Director of Internal Audit or Management
Identify Customer needs and creatively adapt services to exceed their expectations
May perform other job duties as directed by Employee’s Leaders
Knowledge, Skills and Abilities
Knowledge of the relevance of risks associated with exceptions and considers the broader implications
Knowledge of internal controls related to operational and/or compliance risk
Knowledge of System Development Lifecycle for complex development projects
Knowledge of IT audit (application controls, general IT controls) and project management (project management methodology, system development methodology and software quality)
Knowledge of database designs and administration
Knowledge of source control, provisioning solution design, active directory design, identity and system access design.
Skilled in technology, including experience with operating systems, security software, network security, database management skills, business and operational applications, system development and project management practices
Skilled in using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions or approaches to problems
Skilled in considering the relative costs and benefits of potential actions to choose the most appropriate one
Ability to develop and design testing and data analysis approaches based on audit objectives and the target population to form insights and draw conclusions
Ability to schedule and monitor activities to ensure optimum use of time, the Audit Team fully utilized, and to expand/reevaluate the scope of the audit/project when necessary
Ability to adapt to and use technology to improve the effectiveness of assignments, increase efficiencies, and quickly complete work objectives
Ability to conduct difficult conversations in conveying the results of an audit to a professional manner to Leadership including Officers of the Company
Education
Required: High School Diploma or GED
Experience
Advanced level experience, seasoned and specialized knowledge in:
IT audit, cybersecurity compliance, or systems engineering
Developing and working with computer aided audit techniques
Preferred: Experience using Alteryx automation flows
Preferred: Experience with AWS cloud infrastructure
Preferred: Experience with NIST CSF or 800-53 Control Library
Preferred: Experience in an agile audit methodology
Licensing/Certification
Preferred: Certifications related to Internal Audit (i.e., IIA CIA) or technology (i.e., ISACA CISA, ISC2 CISSP, AWS Cloud Practitioner)
Physical Abilities
Ability to perform work duties from [limited space work station/desk/office area] for extended periods of time
Ability to communicate and interact with others in the English language to meet the demands of the job
Ability to use a computer and other office productivity tools with sufficient speed and accuracy to meet the demands of the job
Other Qualifications
Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines
Must be a U.S. citizen or have authorization to work in the United States as defined by the Immigration Reform Act of 1986
Must be at least 18 years of age
Must be able to comply with Company attendance standards as described in established guidelines
Pay & Benefits:
Benefits you’ll love:
*Pay amount does not guarantee employment for any particular period of time.
**401(k) match contributions are subject to Retirement Savings Plan vesting schedule and applicable IRS limits
***ProfitSharing contributions are subject to Retirement Savings Plan vesting schedule and are made at the discretion of the Company.
Southwest Airlines is an Equal Opportunity Employer.
Please print/save this job description because it won't be available after you apply.