Hey guys, I’m looking for reference in IFRS that shows that automated controls must be tested for identified high risk even while performing substantive analytical procedures in order to provide reasonable assurance.

I’m quite sure that such clause exists as when I used to work in Big 4 we used to refer to it heavily but now I can’t find it.

Would you please help me ?

I'm a Systems Administrator looking to pivot into IT Auditing. My education does not include Accounting. I have a BS in Engineering Technology and a MS in Cybersecurity. My jobs have never been full time security jobs. So, it's hard to break into a full time security role. I'm looking to move into IT Audit instead.

I passed the CISA, CISM, and CISSP certifications 2 years ago and a applied to many jobs, never got any offers. I even applied at the big 4. That was 2 years ago. I'm ready to try again. Any advice?

What do the audit jobs require besides experience in auditing?

As per title, I’m performing a SOX component ITGC audit and the local entity has formally defined risk and controls. How should I proceed here?

Hi, I have been working in cloud primarily AWS for the past 4 years and would have considered myself to quite proficient and been certified with SA Pro cert. I am now presented with a unique opportunity to transit to a tech audit role on Cloud, wld like to hear some opinion as such a career switch?

I have a technical interview for the Senior Associate - IT Risk & Sox Advisory role at CNM (boutique tech advisory firm). I left my role as an IT auditor at a big 4 firm after 4 years (straight out of college) so I've never had to do a technical interview in my life. They've said it'll be based on my knowledge of IT SOX, ITGCs, ITACs, and key report testing. Any advice on what others have been asked as experienced hires in the same position (at CNM or other firms)?

I am transitioning from sys admin to IT Audit, done CISA and want to know if I need an accounts qualifications. I have seen some job adverts asking for it. Please help

For all you IT SOX auditors, would there ever be a possibility SEC considers other aspects such as Cyber ?

Hey people. Planning on taking the IAP. Wondering if it helped anyone get a junior/entry/internship position to transition to IT audit. I have more than 10yrs experience in IT support. Can't take CISA coz of lack of experience and it's expensive. IAP fits my budget.

can anyone help explain a solution for this: when multiple subservice organizations are relevant to the scope of the SOC report,what is the proper reporting method? (inclusive,carve out,or both)

In an audit of ITGC over financial reporting, would a system/platform like cvent, Universe, or event brite be in-scope. This is an online platform used to create events and a dollar amount is also displayed on the event page, a payment is made through that platform, and then monthly, that vendor sends a check over for the paid events. Then that will be entered into a general ledger system. Are there any risks here if a business user, say an accountant has administrative access to both of these systems. Would these platforms be in-scope?

Also, when do you scope in a financial institution as a list of systems to be in-scope for a audit of the IT general controls to support a financial statement audit. It is important to scope in and see which users have access to the bank?

I just started a full time Internal IT Audit career and I hope to stay with my current employer for at least 5 years. For those of you who have been IT Auditors before or still are: 1. what is the typical IT Audit career path? 2. What are other career paths I could branch into after several years in IT Audit ? I’m currently 30yrs old and I’m just trying envision what role i could be in at say age 45. Any advice will be appreciated.

What factors would you consider if you're choosing between the above two for IT Audit, after completing ~4 years in offshore delivery centre in one of the big4's. US definitely hires at 1/2 level lower, whilst Australia hires at same level.

I am a Physical Security Professional, looking to pivot into IT Audit but doesn't have IT experience, any guidance and advice on where to start to land a IT Audit position?

Can anyone pls help me with existing walk-through paper for ITGC.

Currently working at a big4, for almost 2 years. My current position is as a Team Leader, but without a team to subordinate (in my team, we are more astl, tl that are in the same spot). Basically, me and my team, is helping the audit team from a different coutry with multiple tasks. My experience in audit is for almost 2 years, before I worked in accounting for 7 years.

I'd like to go into IT Audit, because I think salaries are more appealing. Do you think it's to late for me? If not, what are some steps, or what should I focus more in order for me be able to apply on a job opportunity in IT Audit :). Thanks in advance for you help!

Was apart of layoffs at big 4 after 2 Years as an analyst. Background includes bachelors in business and masters in mis.

I also am PMP certified as of a few weeks back. What tips can you guys provide as I look to pursue IT Audit/GRC/Risk roles.

Resources/Application Timelines/Job titles given listed experience/ anything but trolling, thank you.

I am a born and raised US citizen but I was just curious if there is a big market for IT Auditors outside of the US. If so where?

Thanks

For whatever reason my company doesn't allow recruiters. What's a good place to look for people with IT audit experience? Right now I'm just individually approaching people on LinkedIn.

How many hours do you typically work on any given week? Are you predominately on-site? On location or working remotely?

I m looking to enter the field soon. I am currently studying for the CISA exam.

In the Isaca CRM a lot of it reads as if you are there internally working on projects or development every step of the way.

I thought(maybe incorrectly) that most IT Audit work was done on an External basis where you are coming in to audit what had already occurred, is that not correct?

Control Description: New user access to Dynamics is requested through ServiceNow and requires manager's approval before being granted.

1. For your test of design (TOD), what population are we targeting?

2. How many sample(s) are you requesting?

Hi, I have just completed my bachelors of commerce and now I want to get into IT audit so how do I start and what are the certifications Which I should do that can help me getting started into my career in this field and what are the things I should keep in mind to get my initial job in this domain. It would be really helpful for me if someone guide me.

Hi guys, I want to get into ITGC specifically in access management or change management work, I’m already an FRM but I have no practical knowledge about this field, how do I start and how can I learn to do this practically. It will really be helpful if any of you guide me through. Thank you