Hi Everyone,

Currently I am working in India and recently cleared CISA and have 10 years of work experience in IT SoX external audit , IT internal audit, IT SOX risk and compliance, and ISO27001 vendor risk assessment.

Want to work abroad and settle outside India in the long term. Worked in The Netherlands for almost 2 years but my ex-employer is not able to sponsor my visa now, they have been mandated to hire local employees there.

Came back to India for personal reasons and that is resolved now. Happy to work abroad.

If someone is working abroad and can refer me to a job that fits my work profile, that would be really helpful.

I have an interview for an entry level position with Grant Thornton next week for IT Audit. I am going to be graduating the upcoming spring as I am a senior and I also have no previous accounting internships. If anyone else has done this interview or similar interviews, can you please let me know what are some questions they ask. I have no experience with IT audit so I want to be as prepared as I can.

.

Hi All, I am an IT auditor with 9.5 yoe. I have worked extensively on ITGC, ITAC, interface testing, drafting Risk and Control Matrix, Infrastructure audit, ITAM, ITSM. I am in desperate need to freelance as my current job is not paying much and i have 2 daughters and wife. Thinking for future perspective, i am chosing to start freelancing. I can assure to provide detailed workpapers alongwith testing evidences in a efficient way. Any leads would be appreciated.

Thank you!!

Hi everyone,

I'm currently looking for my next professional opportunity, so I thought I'd give this community a try.

I have 3+ years of experience in External IT Audit, mainly working with ITGC, IT controls, access management, privileged accounts, risk assessment and control testing.

I've worked with different technical environments, including Active Directory, Microsoft Entra ID, Windows Server, Red Hat Linux, Oracle, SQL, SAP GRC and PowerShell. I also have experience with IT and cybersecurity audits in cloud environments such as Azure and AWS.

Beyond the technical work, I've conducted interviews with cybersecurity and technical teams, reviewed IT audit work performed by other team members, and led meetings with clients and stakeholders to present audit results and discuss findings and recommendations.

I'm particularly interested in the technical side of Information Security and enjoy understanding how systems, infrastructure, identity and access controls actually work.

I'm currently open to IT Audit, Cybersecurity/GRC, Cloud Security, Risk & Compliance, AI training/evaluation related with IT Audit/GRC, Portuguese QA and remote contract or full-time opportunities.

I'm based in Brazil and open to remote opportunities worldwide.

If you know of an opportunity that might be a good fit, I'd really appreciate a message or referral.

Thanks!

Hi, I have 3 years of experience in ITGC / IT Audit 52-109 (the Canadian equivalent of SOX) in industry. I started this job directly after graduating from university. I don’t have any Big 4 experience, and I’m currently preparing for the CISA with the goal of eventually working abroad, especially in the Gulf region or Malaysia.

I’m wondering if the CISA will actually help me with that, or if I’m being delusional and still not experienced enough to expatriate.

(This post is crossposted)

I am currently working in GRC content. Basically we id requirements from a guideline/standard/law, then fit it in to a tool. I also do some regulation mapping, library maintenance, and script development for parsing.

I know I am about to hit a wall of growth. For almost a decade I have been doing this. I know the next step is to do audit/assessment, talk to stakeholders, consulting, etc. I feel like in the middle of crossroads - too experienced yet too underexperienced - I know implementation/assessment in theoretical form, the surface level, but of course getting your hands dirty is what gets you into places.

I am currently focusing on building a homelab for technical knowledge, and prepping for CISSP & CISA.

Any tips are greatly appreciated. It feels like I am too late already.

So I am a manager in a big 4 global team since 3 years (IT Audits). I am struggling with the environment and have lost interest in the day to day work

Now recently I have received an offer from a US based audit company that are setting up their office in India.

The offer that I have received is 1.4 (40%) times my current CTC. However the designation that they are giving me is of a Senior Associate. At the same time it is also a individual contributor role. There would be no team management as there is no other team member either above or below me for IT audits. And I'd be directly working with the US team members for US clients. And as per the company's internal policy, I won't be eligible for a promotion in the next 2 years regardless of my performance post joining.

I am leaning towards accepting the new offer as the salary is attractive, however I am worried if it'd hinder/slow down my career growth and impact future opportunities.

​My Questions for you all:

​1. Will a title downgrade from Manager to Senior Associate look like a red flag to future employers on my resume?

1. ​Has anyone made a similar switch (Management to IC) for much better pay? Did you regret giving up the leadership track?

2. ​Given the 2-year promotion lock-in, is this a trap that will slow down my career trajectory, or is the 40% hike worth having a stagnant title for a while?

Hi All,

Due to cost reduction measures all the cost centers including audit have been outsourced to one of the Service Based Company.

We have one month time to transition and then we are back to the open market.

I have 7.4 years of experience in IT SOX Audits which includes -

1) ITGC - IT General Controls

2) ITAC - IT Application Controls

3) IPE - Key Report Testing

4) SOC - Third party assessments

5) Infrastructure Audits - Servers, Databases

6) Automation of Controls

7) Optimization for Operational Efficiency

8) Mentorship and Team Leadership along with review experience.

9) IT Audits across regions.

10) Process improvements and usage of Gen AI.

I have experience across Big 4 and Product Based companies.

Looking forward to any advice, leads, referrals and bit of motivation as this has come as a jolt after being promoted 6 months ago.

Thanks and appreciate your support!!

I am looking for something in Bangalore.

We're SOC 2 Type 2 and just got pushed to add ISO 27001 and NIST CSF by customers. Everyone says there's a lot of overlap and I'm skeptical because I've heard that before and it usually means half the work, which is still a lot of work. Has anyone tracked what reused versus what had to be rebuilt? Specifically interested in where the overlap turned out to be wrong.

I am writing a blog about how inexperienced IT auditors can get off to a strong start in their new role. I'd appreciate it if you could respond to the opinion poll at the shared link. Thanks.

I’m currently exploring IT Audit as a possible career move, and I’ve been reading a lot about the role. But I feel like there are some questions you can only really answer if you’re actually doing the job.

Your insights would probably help not just me, but also others who are considering IT Audit 😊

Would really appreciate any honest insights — good, bad, or somewhere in between. 😅

1. How’s the workload?
How many clients/projects do you usually handle at the same time? Is it manageable, or are there periods where everything piles up?
2. Is IT Audit mostly project-based?
For example, once you finish auditing a client, do you move on to another client? Or do you usually have recurring clients that you audit again the following year?
3. How long does one audit usually take?
How long does an IT auditor spend on one client? A few weeks? 1–2 months? Longer?
4. What’s the busy season actually like?
Is it mainly year-end, or are there multiple busy seasons throughout the year depending on the clients? And how bad does it get during peak season? 😂
5. How does the pay for someone moving into a Senior role without actual audit experience?
For example, someone with several years in ERP consulting that has testing, support, and systems implementation experience but is new to IT Audit. Would they normally still be considered for a Senior position, and how is the compensation compared with someone who already has audit experience?

Would love to hear from people who are actually in the field. Even random details about your day-to-day work would be super helpful. 🙏

GOOD DAY PO IAM 3RDYEAR COLLEGE PO FROM DALUBHASAAN NG LUNGSOD NG SANPABLO AND MAY MAJOR IS PROJECT MANAGEMENT WE ARE LOOKING FOR AN INTERVIEW FOR AN IT AUDITOR PO SANA KHIT VIA CHAT LANG PO TO ANSWER THE TASK QUESTIONS LANG PO ABOUT YOUR FIELD PO SOBRANG MALAKING TULONG NAPO ITO SAMIN IF YOU ARE WILLING TO HELP US PO SALAMAT PO AGAD.

I have an interview coming up to help a CPA firm prepare for an upcoming SOC peer review, and I’m looking for some advice.

I previously worked as a SOC audit intern at a small CPA firm. But I was mainly testing controls, collecting evidence, and did some TPRM work. It’s been a little while, so I’m refreshing my knowledge now.

For anyone who has been through a SOC peer review or helped prepare for one: What should I expect, and what areas would you recommend brushing up on before the interview? Any projects you’d recommend?