An IT auditor is responsible for analyzing and assessing a company’s technological infrastructure to ensure processes and systems run accurately and efficiently, while remaining secure and meeting compliance regulations. An IT auditor also identifies any IT issues that fall under the audit, specifically those related to security and risk management. If issues are identified, IT auditors are responsible for communicating their findings to others in the organization and offering solutions to improve or change processes and systems to ensure security and compliance.

The role of an IT auditor involves developing, implementing, testing and evaluating audit review procedures. You’ll be responsible for conducting IT and IT-related audit projects using the established IT auditing standard in your organization. The audit process can extend to networks, software, programs, communication systems, security systems and any other services that rely on the company’s technological infrastructure.

It’s an essential role for organizations that rely on technology given that one small technical error or misstep can ripple down and impact the entire company. IT audits are important for evaluating internal control and processes in an effort to keep the organization and its data secure from external or internal threats.  

As an IT auditor you will be responsible for running several audits of an organization’s technologies and processes. IT audits are also referred to as automated data processing (ADP) audits and computer audits. In the past, IT audits have also been labeled as electronic data processing (EDP) audits. Companies may also run an information security (IS) audit to evaluate the organization’s security processes and risk management. The IT audit process is typically utilized to asses data integrity, security, development and IT governance.

There are several types of IT audits, including:

According to data from the Robert Half Technology 2019 Accounting and Finance Salary Guide, the average salaries for an IT auditor ranging from entry level to manager are as follows:

Robert Half defines the 25th percentile as candidates new to the role, still developing skills or who are working in a market with low competition or at a smaller organization. The 50th and 75th percentiles encompass candidates who range from average experience and skills to those with stronger skillsets, specializations and certifications, according to Robert Half. Both groups typically work in roles with more complexity or in markets with higher competition. Robert Half’s 95th percentile includes those with highly relevant skills, experience and expertise who are working in a highly complex role in a very competitive market.

The skills you need as an IT auditor will vary depending on your specific role and industry, but there’s a general set of skills that all IT auditors need to be successful. Some of the most commonly sought skills for IT auditor candidates include:

Entry-level IT auditor positions require at least a bachelor’s degree in computer science, management information systems, accounting or finance. You’ll want a strong background in IT or IS and experience in public accounting or internal auditing. The job requires a strong set of technical skills, with a strong emphasis on security skills, but you’ll also need soft skills like communication. You’ll be responsible for not only identifying issues during an IT audit but also explaining to leaders outside of IT what is wrong and what needs to change. Analytical and critical thinking skills are also crucial, as you’ll need to evaluate data to find trends and patterns to identify IT security and infrastructure issues.

If you want to get certified as an IT auditor, Robert Half Technology points to two specific certifications that are useful for IT auditors. These include:

More on IT security:

This story, "What is an IT auditor? A vital role for risk assessment" was originally published by CIO.