Information System Auditor

As an IT auditor evaluates an organization's technology infrastructure, internal controls, and data systems to ensure security, efficiency, and compliance with regulations. Tests and reviews computer systems, networks, and security controls. They report vulnerabilities and recommend risk-mitigation strategies to management.

Key Responsibilities

• Evaluate Controls: Test IT general controls (ITGC), application controls, and logical access permissions.
• Assess Risk: Identify security gaps, system weaknesses, and potential data breach risks.
• Ensure Compliance: Verify alignment with regulatory frameworks like SOX, NIST, or ISO standards.
• Report Findings: Document audit results, draft technical reports, and present recommendations to leadership.
• Track Remediation: Follow up with IT teams to ensure identified issues are fixed.

Requirements and Qualifications

• Education: Bachelor's degree in Information Technology, Computer Science, Information Systems, or Accounting.
• Certifications: Preferred credentials include ISACA Certified Information Systems Auditor (CISA), CISSP, or CIA.
• Experience: 2 to 5 years in IT auditing, risk assessment, or information security.
• Skills: Strong analytical thinking, knowledge of network security, and clear communication skills.