[dbennet6]

I am finishing up the exams and looking for employment at local CPA firms in audit. I feel like I would like to move into IT Audit.

Is there anything I could focus on that could be presented in my resume to show that I would be valuable to this respect? Or some sort of programming language that would be useful? While studying for REG I am also doing a Udemy course on SQL and then ill be moving onto VBA so that I can add that to my resume.

I think my main issue is at the moment while not even being employed at a CPA firm to gain experience when I interviewed they mentioned they were looking for IT auditors, I am interested in a CISA but having zero experience really makes me hesitant as you need 3-5 years IT audit experience.

Is there anything other than SQL, VBA and reading up on CISA topics(https://www.isaca.org/knowledge-center/itaf-is-assurance-audit-/it-audit-basics/Pages/IT-Audit-Basics-Articles.aspx) that I can do to seem more valuable on paper?

FAR - 74, 76!!!!(5/15/15)
AUD - 68,71, 73, 92!!!!(1/11/16)
REG - 68, 71, 78!!(2/22/16)
BEC - 75!!(10/2/15)

[abranaugh]

I was an IT Auditor for EY for awhile. I originally started off as a software developer and made the switch to IT Auditing. One thing I would say is that while having knowledge of programming was somewhat helpful, it wasn't a requirement. I didn't do a whole lot of looking at code and figuring out what was going on. I took a look at SQL queries more, but again, most of the time we needed the clients help determining exactly what was going on. So understanding the basics of SQL is useful, but again, not necessarily needed.

Most of the time I spent was revolved around the change management processes and controls (how does a bug/software enhancement, etc, go from being requested to developed to tested and finally released to production). We also looked at the security side, so how are users provisioned to the system, how do they know that people have the correct access levels, etc. Lastly we took a look at the operations side, backups, job scheduling, etc.

Another aspect was testing the controls that were built into applications, such as the three way match in AP works the way it is supposed to.

If I were you and were interested in IT Auditing, I would look mostly at the ISACA website and become familiar with those core concepts. Also express interest to your firm that it is something you would like. If I remember correctly, you need 5 years of experience, but having the CPA counts towards that experience, your education counts towards that experience as well. I think you can sit without having the experience. Someone please correct me if I am wrong.

We hired a lot of students that just had the accounting knowledge and had no IT experience whatsoever, so it is not absolutely necessary.

[abranaugh]

–Double Post–

[dbennet6]

Thanks for the info abranaugh, very insightful

FAR - 74, 76!!!!(5/15/15)
AUD - 68,71, 73, 92!!!!(1/11/16)
REG - 68, 71, 78!!(2/22/16)
BEC - 75!!(10/2/15)

[Last Chance CPA]

I come from a non-programming IT environment, but never got into the core development side of things. I am now learning the basics of coding – e.g., SQL, JavaScript, HTML, Python. Most of what I am doing is for side projects such as building my own website, but I will say that the experience is opening my eyes into back-end technology/databases like never before. I would definitely learn SQL inside and out, and maybe sit for the CISA cert if you are certain you want to get into IT audit. I won't do CISA, CIA, or CFE until I have landed something in an IT/CPA environment. I do have a strong interest in IT fraud/forensics, maybe that's something you can look into down the line?

FAR - 76
AUD - 75
BEC - 75
REG - 76

Now I need some experience!!! And some networking...

[jeffk67]

Follow @abranaugh‘s advice. I was in IT development for over 20 years and during that time I met with many auditors often times the conversations focused on procedures, controls, etc. I never had an auditor ask to look at code (if it did happen) I would have denied access as an auditor not because of their inability to understand source code but mainly due to the lack of system knowledge.

It's great your learning SQL and other basic concepts which will help with general understanding but often times you'll be auditing what was mentioned by @abranaugh

[Author]

Replies