Overview

What is IT audit and what does an IT auditor do?

An IT audit is the examination and assessment of the management controls over an organisation's information technology infrastructure, policies and operations. The IT audit determines whether systems are protecting assets, maintaining data integrity and operating effectively to achieve the overall objectives of the business.

An IT auditor is responsible for the assessment of a company’s technological infrastructure. They evaluate whether processes and systems are running accurately and efficiently while remaining secure and meeting compliance regulations. IT auditors will look at physical controls as well as overall business and financial controls that involve IT systems.

Key responsibilties

Responsibilities will vary, but examples include:

  • Collecting and analysing of data from databases, software programs and information management systems
  • Documenting control weaknesses
  • Communicating findings to others in the organisation and offering solutions to improve or amend processes and systems to ensure security and compliance
  • Developing, implementing, testing and evaluating audit review procedures

Why is it important?

IT auditors are important for any organisation that relies on technology. They determine risks to a company’s information assets and ensure efficient processes and robust controls are in place to keep the business and its data secure from external or internal threats. As this is achieved by gathering evidence to determine whether the controls are designed and operating effectively, the judgement displayed by experienced IT auditors is highly valued

Competencies needed for this role

The role of an IT auditor requires solid audit experience along with expertise in IT systems, infrastructure and applications. These individuals must also possess excellent analytical and communication skills in order to accurately document and present data in non-technical terms. Discretion is also key as this role regularly deals with confidential and sensitive information

Career opportunities presented by this role

As a result of the strict regulatory climate and ever-evolving IT security landscape, these roles very much in demand. Career progression is excellent, and opportunities are available both in practice and in-house.

Competencies

High level competencies required by IT audit specialist include:

  • Strategy and Innovation



    A. Applies business acumen and commercial awareness to deliver business objectives.

    B. Recommends a range of suitable strategic options from which to develop sustainable plans and objectives.

    C. Evaluates, justifies and implements suitable strategic options.

    D. Adopts and applies innovative methods to implement strategy and manages change.

  • Data, Digital and Technology

    A. Identifies strategic options to add value, using data and technology.

    B. Analyses and evaluates data using appropriate technologies and tools.

    C. Applies technologies to visualise data clearly and effectively.

    D. Applies scepticism and ethical judgement to the use of data and data technology.

  • Audit and Assurance

    A. Advises on and communicates effectively the role and scope of audit and assurance engagements to relevant stakeholders.

    B. Applies regulatory, legal, professional and ethical standards relating to audit and assurance engagements.

    C. Plans and prepares for audit and assurance engagements.

    D. Performs effective audit, and assurance engagements.

    E. Reviews and reports on the findings of audit and assurance engagements.

    F. Guiding efficient and effective operations.

  • Stakeholder Relationship Management

    A. Positively develops relationships with internal and external stakeholders.

    B. Communicates and gains commitment from internal and external stakeholder.

    C. Uses emerging technologies to collaborate and communicate effectively with stakeholders.

    D. Applies professional and ethical judgement when engaging with stakeholders.

    E. Aligns organisational strategic objectives with stakeholder needs and manages expectations.