IT Auditor

[JJW_123]

I am a accounting graduate, and i have worked as an external auditor in a local accounting firm.

I was offered a role in IT audit in a mid tier accounting firm. Is there any prospect or future, or is there anything that i should take note before taking up this job.

As far as i know the Big 4 do have IT auditors, and industry have open up to accounting grads although they have not much IT knowledge.

Seeking advise as i do not know much in the IT audit industry.

 

[seesiang]

I am a accounting graduate, and i have worked as an external auditor in a local accounting firm.

I was offered a role in IT audit in a mid tier accounting firm. Is there any prospect or future, or is there anything that i should take note before taking up this job.

As far as i know the Big 4 do have IT auditors, and industry have open up to accounting grads although they have not much IT knowledge.

Seeking advise as i do not know much in the IT audit industry.

Welcome to IT Security.

Don't forget CISSP, CISA, CISM, Crisc, CGEITM, ISO27001 and Cobit.

If my understanding is correct, your post is finance auditor and is not IT auditor.

Finance auditor require CPA, CFA, CIA and ACCA.

It may sound grey between the job but both are different.

 

[JJW_123]

Hi,

Could you shed some light on the possibilities why they would want an accounting student instead of the usual Computer science graduate?

Thanks

 

[seesiang]

Hi,

Could you shed some light on the possibilities why they would want an accounting student instead of the usual Computer science graduate?

Thanks

Could you share what did your interviewers answer to this question

 

[loftystew]

Do you mean (IT) auditors that uses CAATs to review data/transactions for anomalies?

I seriously doubt the IT auditor they are referring to is IT security auditor. These knowledge typically aren't found in an accountant graduate. Even computer science graduates will find themselves lacking the know-how in IT security auditing.

 

[JJW_123]

Firstly thank you all for trying to help out.

I believe it is Technology advisory team which include IT assurance, IT security.

Here are some wordings from the interviewer that i remember

GRC( governance, risk and compliance )
Statement of Auditing Standards.
Improving managment controls
Maximise ROI on IT assets.

I believe it is more of a advisory/ consultant job.

Please correct me if I am wrong.

 

[Lastexile]

Hmm I can only make haphazard guess that they just need manpower in IT audit. Furthermore IT audit can be done without any brain - just follow the checklist and verifying assets. So don't bother with all the fancy words your interviewers were using, it all boils down to following the checklist.

Big4 career progression is pretty straight forward. Basically it's up to you whether you can survive the shitty hours and environment and you will get your promotion.

 

[seesiang]

Hmm I can only make haphazard guess that they just need manpower in IT audit. Furthermore IT audit can be done without any brain - just follow the checklist and verifying assets. So don't bother with all the fancy words your interviewers were using, it all boils down to following the checklist.

Big4 career progression is pretty straight forward. Basically it's up to you whether you can survive the shitty hours and environment and you will get your promotion.

This is a norm. Regardless you are in public sector or private sector, you are hire as a junior role and expected to execute as a CISO.

What is new? This is to let you learn.

 

[JJW_123]

thanks all for your input. Truly appreciated.