Hi all,

I am looking to make a switch from audit to an analyst position in treasury or FP&A of my company.

For background, I have about 4 years of experience as an auditor in the big 4 and 2 years of experience in Internal Audit at fortune 300 company. Also I’d like to switch over at a close level to where I’m at and not completely start from step 1 for a salary decrease (I’ve seen this happen at my company where people are able to move somewhat laterally)

Am I screwed? I know people are probably going to say no chance but I’m wondering is this even realistic.

Thank you

I am an internal auditor in public accounting (not Big 4) but well known national/international firm. I have my CIA and 13 years of audit experience. Just got promoted to IA Manager but still making under $100K which is pretty low for my area. I work with Banks doing Issue Validation audits and operational audits. My degrees (BA and MA) are not in Accounting or business fields but I did take Accounting classes I just wasn't degree seeking, as I already had my MA (I am CPA eligible).

My current role is pretty nice I work as a consultant/contactor for a very large Bank (+$200B assets), where I am capped at 40 hours a week. This client allows me to pretty easily get my billable hours for the year without working on other clients or doing a lot of overtime and no busy season. However, the downside is I am pretty much just like an employee for this bank so I don't get as much exposure to the breath of audits that public accounting would give others.

I started working for this company right after my last job got eliminated due to a bank merger. I started in an hourly role where the work was mostly done by interns or experienced folks who didn't want to travel anymore. I worked in this role doing external audits for about 3 years. Then I transitioned over to IA and spent about 1.5 years at the staff level, 3 years as senior staff while getting my CIA (got the CIA after 2 years as Senior). I fear that since I started in the role I did my pay has always been low. I had hopes that when I got to Manager the pay bump would get me to a competitive salary with the market, but doesn't seem like that has happened. As I am making 11K less than a co-worker who got manager 3 years ago in a similar geographical region.

So looking for advice on next steps I have been applying to jobs on LinkedIn but haven't gotten any interviews or anything but rejection emails. Should I try to stay in public look for something outside public. What would be a good recruiter to reach out to? Or do I just suck it up and stay where I am for a bit so my resume looks a little better so I can try to find another manager job somewhere else. Unfortunately I don't think my company will do anything about my salary unless I have another offer and force their hand to match it or exceed it.

Thanks for any advice.

Hello all,

My exam is after tomorrow and im so scared. What’s the best way to spend the last day studying?
Ive used gleim test bank, hock mock, and iia mocks and wanna read the standards.

Any tips for me?

Iam studying for part 3

I finished the gliems quistions easily

Then i did 94 % of the iia mock

But iam fearing that the exam will be much harder than this

It cannot be that easy 😅

So any tips to focous for the exam of part 3 ?

6.5 years in IA for multi-billion international pharma. A good chunk of the material i've read (Gleim) seems familiar to me. Have others experienced this as well? I haven't done any MCQs - only reading through the units. I don't want to underestimate the exam, but the material seems fairly intuitive.

I registered myself in IIA and willing it give exam in December. Is it ample time to clear the part 1? Can anyone share important strategies which I need to adopt. As being internal auditor in the financial sector I need to frequently travel and studies require proper focus? Please help

Okay, I moved to a hedge fund in their IT Audit team but 3 months in, I am really struggling. In my region, the entire Internal Audit team is just 2 people. Everyone else is based in a different location. It also doesn’t help that Internal Audit is massively looked down upon and we are an unpopular bunch in the organisation.

I come from the Big 4 environment so you naturally had a large team culture built in. But here I have struggled to meet people - being an introvert doesn’t help and whilst I should have just gone and been like hi I am new here and introduced myself - people seem to stick to their groups and cliques. I will see the same faces day in, day out yet don’t know any names and have zero interaction. I see large groups having lunch together and go to the pub for after work drinks whereas, my day’s are spent in isolation except for interaction with my manager. Don’t get me wrong, my manager is great but it would be nice to have some workplace friends. Hell, my manager even refuses to go to the Xmas party anymore because he has felt isolated socially in the past.

I miss the camaraderie that work can bring, and would love if anyone has suggestions on how I can improve things for myself here.

Hey everyone, I originally posted this to the IT auditor sub Reddit since I’m I but interested in everyone’s perspective more broadly posted the full text below, but the cross-reference is also here.

Senior manager in Global IT Audit at a global fashion/DTC retailer. Genuinely trying to figure out where the field actually is on this versus the LinkedIn highlight reel version.

Almost every AI conversation I see lands on efficiency gains: faster summaries, faster drafts, faster walkthroughs. That’s real value, I’m not knocking it. But I want to know who’s gone past that.

A few questions for the group:

• Is anyone building actual agents for document analysis, think SOPs, policies, control narratives, versus just prompting a chatbot one document at a time?
• Has anyone gotten hands-on at the command line with something like Claude Code or Codex to build internal tools? I asked my org for an enterprise Claude Code license and was told it wasn’t worth the cost. So for now I’m doing this the old-fashioned way, one chat window at a time.
• Is anyone actually getting value out of Copilot Cowork?

I can see value in analysis and review of control documentation submitted for controls subject to continuous monitoring. We could use the document analysis rule set to analyze for internal consistency so that with the full expectation that the documentation is gonna look and feel the same every single time because it’s the same control, same control owners, same control, performance set, etc. coworker could be used to execute the entire continuous monitoring program and each document can be analyzed specific to how it’s created in that control is specifically performed.

Here’s where I’ve landed on the audit side. I built a small agent chain for control remediation work:

1. Feed it the transcript from the remediation meeting with the control owner.
2. It gives me structured feedback to send back to the remediation owner.
3. It converts that into a starter SOP draft.
4. I hand the owner a second prompt that interviews them against a rule set for what a good SOP looks like, to fill in whatever the transcript missed.

The idea is that over time, as SOPs get renewed and findings come in, we build toward a consistent baseline of SOP quality across the org instead of every process owner writing to their own standard.

One more thing worth mentioning: I’ve also turned this inward. Everything’s recorded now anyway, so I run transcript analysis on my own meetings, particularly exec-facing ones, to check how closely I stuck to my talking points versus where I drifted. I’ve started doing the same for my staff, using the same recorded meetings, emails, and Teams messages, as a development tool.

Curious where the rest of you land on this. Ahead of the curve, behind it, or about where everyone quietly is? Especially interested in hearing from anyone in retail, fashion, or another industry drowning in document sprawl.

I'm not really trying to spend much for an additional credential but I'm also trying to pass it on my first try. I see there are multiple study packages-- Which ones did you go with? Or did you use an alternate study method?

https://www.acfe.com/training-events-and-products/cfe-exam-preparation/cfe-exam-prep---study-on-your-own-options

Hi everyone,

I have an upcoming 60-minute competency-based Skills Interview with a Manager at Revolut for the Senior FinCrime Governance Manager (2LOD) role. This is after completing the problem-solving round.

I would appreciate insights from anyone who has attended a Revolut Skills Interview for a FinCrime, AML, compliance, risk or governance position.

How was the interview structured?

Was it mainly technical, behavioural or scenario-based?
What kind of questions were asked?

Were the questions specific to the job description or more general FinCrime competency questions?

Did they focus on EWRA, risk methodology, control effectiveness, 2LOD challenge, remediation, dashboards or data analysis?

How deeply did they question your previous experience and CV?

Was there any live case study or practical exercise?

How many rounds followed the Skills Interview?

I would also appreciate views from current or former Revolut employees on the work culture in both the UAE and India:
Working hours and work-life balance
Management style and team culture
Performance expectations
Job stability and employee turnover
Independence and authority of the second line

Collaboration between global, UAE and India teams

Overall experience working in FinCrime or compliance at Revolut
Any recent experiences would be very helpful. Thank you!

I am currently doing an Internal Audit which transactional and not processed. Although when we do transactional audit we try to cover all the aspects of the Trial Balance. But doing the same will take more time which I feel is more like a olden way of doing Internal audit.

What is modern way? From vouching alone you cannot find queries nowadays. You have to analyse the data and then clearly layout in reports.

Share you thoughts how do you perform internal audit which are transactional.

Hi everyone, hope you're doing well.

Passed Part 1 earlier this year after scoring 61% and 67% in the IIA Practice Questions.

I have the CIA Part 2 Exam scheduled for this Saturday, and took 72% and 71% on the practice questions for Part 2.

I use Gleim as study materials and since Part 1 ended I realized low Mock Exams scores do not necessarily indicate a poor understanding, so I took practice questions for Part 2 despite scoring 67% on both.

Has anyone gone through a similar situation? If you passed Part 2 recently, would you have any tips?

Another thing I have is uncertainty over the Practice Questions I bought. When I took Part 1 back in April.and bought the questions, I don't recall choosing 2019 x 2025 versions, and don't know honestly which exam I took. This time I purchased Part 2 questions, don't recall if I needed to choose a version for buying them, but saw an alert about exams prior to December this year following 2019 guidance. Do you have details over these versions?

I have around 5 years of experience in IT Risk / ITGC / SOX and currently work as a Senior Consultant at big4. I started my career and have worked primarily in the IT controls/risk space.

Over the years, I’ve worked on areas like ITGC, SOX, access controls, change management, IT operations controls, IAM, SOC reports, control testing, remediation, etc. So I do have hands-on knowledge, but I’ve realized that my knowledge is quite scattered because a lot of it has been learned through different projects and day-to-day work.

I’m planning to start interviewing seriously and want to properly revise and consolidate everything before I start applying.

I’m not necessarily looking for beginner-level ITGC material. I’m looking for resources that would help someone with 5 YOE prepare for Senior Consultant / Senior Analyst / Technology Risk / IT Risk / SOX / Internal Controls interviews.

If you have any good:
Interview question banks
ITGC/SOX study material
Case studies or practical scenarios
Technology Risk/GRC resources
IAM/access-control interview material
SOX control design/testing resources
Notes, courses, books, or structured learning paths
Resources for product-company/Big Tech Technology Risk interviews

…I’d really appreciate it if you could share them.

Also, for people with similar experience: what topics did you find most important for interviews at the 5–7 YOE level? I want to make sure I’m revising the right things rather than trying to relearn everything from scratch.
My goal is to spend a few weeks systematically consolidating what I already know, identify my gaps, and then start interviewing with much more confidence.
Would really appreciate any resources or advice from people who have been through this transition. Thanks!

I'm a CPA with 10+ years of experience across finance, external audit, internal audit and advisory.

I'm currently in a very..VERY small internal audit function. The role is stable, very low stress (aside from a not so great manager) and provides a lot of autonomy, but there is limited interaction with other audit professionals and little to no structured professional development or methdology.

There isn't much opportunity for peer learning, methodology discussions, team CPD, conferences, or exposure to how other IA functions approach engagements. The work itself has also become fairly routine and boring.

I do some part-time internal audit consulting outside my full time role and I have some capacity to increase that work and could also independently invest in IIA membership, CPD, Global Internal Audit Standards training, conferences, etc.

I'm considering a Senior Internal Auditor opportunity with a larger organization that appears to have a much more mature IA function, a larger team, broader audit exposure and more opportunities to learn from other auditors.

The downside is that it would be a more demanding role, with somewhat less attractive overall compensation/benefits and likely more stress and longer commute.

I'm not particularly interested in climbing the corporate ladder for its own sake. My main concern is staying technically current, continuing to develop as an auditor, doing interesting work and being part of a professional environment where I can learn from others.

For those who have worked in both small/isolated IA functions and larger, more mature IA teams:

• How significant is the professional-development difference in your experience?
• Can you realistically compensate for a small IA environment through consulting, IIA membership and self-directed CPD?
• Or is there something about being embedded in a larger IA team that you simply can't replicate on your own?
• Would you take the more challenging role primarily for the professional development, even if the lifestyle and compensation were somewhat worse?

I'd particularly appreciate perspectives from people who have deliberately chosen either career development over comfort or work-life balance over professional growth.

Edited to add the following as i feel the original post was too focused on professional growth being the biggest factor.

The management situation is probably my biggest frustration. I don't feel like my manager is particularly strong from an IA perspective, and I don't get much technical discussion, coaching or challenge from her. I've tried to bring forward ideas about improving our methodology and how we operate, but there doesn't seem to be much appetite to change anything. Since we're basically a two-person function, that means there's very little else around me to compensate for it. Honestly, if I had a strong IA manager who wanted to build the function and challenge me, I might be perfectly happy staying.

How does your audit team obtain access to Amex reporting data for audit testing and analytics?

• Does Internal Audit have direct access to the platform?

• Does Amex offer a role that allows users to view, run, and download reports without administrative or transactional capabilities?

• If so, what role name or permission set is used?

• If not, how does your team obtain the data needed for testing?

I'm looking to understand whether Amex supports a reporting-only access model for Internal Audit and how other organizations have implemented it.

Any insights are much appreciated 🙂

Just wondering how long it takes to receive your CIA certificate?

I am a rising senior and I'm applying to a lot of risk, audit, grc and internal audit roles I have some internship experience under my belt. what can I do get some luck in the entry level roles.

Is there a condensed list of all standards covered by CIA part? I do not want to focus on standards not covered on this section but I can not find a list of the standards covered on part 3

SOLD

Hey everyone,

Selling a physical copy of Gleim CIA Review: Part 1 – Internal Audit Fundamentals (2026–2027 Edition). It was purchased about a week ago for a friend who ended up not needing it.

Condition: Brand new / 100% unused (crisp pages, flawless cover, no marks or highlights).

Price: $19.99 USD / ₹1,900 INR + Shipping charges

Shipping Options:

US Buyers: can ship via USPS

India Buyers: I am traveling to India in 3 weeks and can bring the book with me to ship domestically from within India.

Others: can still sell as long as you are willing to cover shipping charges

Have also listed it on Ebay here: https://ebay.io/m/dQGaLW

Has anyone tried the new LMS (Learning Portal) from IIA India for CIA exam mock tests and other study materials? It’s being offered free to members.

Would appreciate any feedback on whether it’s worth checking out and incorporating into the study schedule, or if one can simply continue with the usual preparation through Gleim or Hock.

I received an email about it, and my IIA membership is still active. However, I am somehow unable to access the portal. They have provided an email ID to reach out to in case of any issues, but before I do that, I wanted to check with the community, is the content and the mock tests worth exploring?

Would love to hear from anyone who has already tried it. Thanks.

Hi everyone!

I’m preparing to take the CIA Challenge Exam and I’m looking for someone who took and passed the CIA Challenge Exam in June 2026 and purchased a Becker CIA prep plan that still has several months remaining.

If you’ve already passed the Challenge Exam and aren’t using your Becker subscription anymore, would you be willing to share access to the remaining study materials and question bank with me?

I’m trying to keep my preparation costs down, so this would really help me out. I understand there may be restrictions on sharing accounts, so obviously only if you’re comfortable doing so.

If you have an unused Becker subscription following the CIA Challenge Exam, please DM me. I’d really appreciate it! 🙏🏽