IT Audit Careers Guide

Advice and guidance to help you navigate your career in IT Audit & Information Assurance.

2004–presentlive

Welcome to the IT audit and information assurance careers guide, explaining what IT audit and information (or cyber security) assurance is, who does it, how to get in to it and how to progress as a specialist information systems auditor or cyber security assurance professional.

This was originally posted on a website called ISRisk, and I have now updated and reposted it here because — 15 years later — it's still popular. So much so that people were pulling it from Wayback Machine. So now, if you like it, it's here to stay. I hope you find it useful as you set out on your journey in audit and assurance.

Part 1 — Intro to Audit, IT Audit & Information Assurance

1.1
An introduction to IT Audit & Information Assurance careers
1.2
Top qualities for a good IT auditor
1.3
Understanding audit and risk
1.4
Good auditor or bad auditor – which are you?
1.5
What do auditors do all day?

Part 2 — Qualifications and Training

2.1
Should I get CISA Certified?
2.2
Should I get CISM Certified?
2.3
Should I get CISSP Certified?
2.4
Project assurance skills and Prince 2 for IT auditors
2.5
A personal experience of CISSP boot camp
2.6
List of IT Audit Professional Bodies & Certifications

Part 3 — Endnotes

3.1
Arthur Miller on Auditing
3.2
Cyber security assurance: What is right for my business?