An auditor focused on information systems controls — testing IT general controls, application controls, change management, access management, backup and recovery, and the technology environment that supports financial and operational processes. Foundational IT audit work.
Most days tend to involve controls testing, system walkthroughs, evidence collection, and findings documentation. You'll often test user access reviews, change management approvals, batch job controls, backup verification, and application-specific controls — producing findings that feed SOX certifications, audit reports, or compliance attestations. Engagement cadence varies by employer and scope.
The variance between settings is real — internal audit at a public company runs heavily on SOX IT general controls; external audit IT teams at public accounting firms support financial audit engagements; consulting firms deliver SOC 1, SOC 2, and other attestations; financial services audit covers banking-specific systems and regulatory expectations. Technical fluency with cloud, ERP, and infrastructure matters increasingly.
People who tend to thrive here are comfortable with technical depth, patient with audit documentation rigor, and effective communicating findings to both IT and business stakeholders. CISA credential is the dominant signal. The work tends to offer strong demand and clear career ladders toward IT audit manager, director, or CISO-adjacent paths, with the trade-off being the constant catch-up as technology evolves — for those who enjoy the rigor-meets-tech intersection, the work has durable appeal.
Where this role sits in the broader career landscape — and where it can take you.
Roles like this one sit within a broader occupational category. The numbers below reflect that full landscape — helpful for context, but your specific experience will depend on level, specialty, and where you work.
An auditor focused on information systems controls — testing IT general controls, application controls, change management, access management, backup and recovery, and the technology environment that supports financial and operational processes. Foundational IT audit work.
Median pay for an Information Systems Auditor is about $82K nationally, with the field ranging roughly from $53K to $141K depending on experience, employer, and metro (BLS).
Core skills for this role include Reading Comprehension, Active Listening, Speaking, Critical Thinking, and Judgment and Decision Making.
Employment in this field is projected to grow about 4.6% through 2034, with roughly 1.4 million people working in it today (BLS).
Closely related roles include Junior Information Systems Auditor, Senior Information Systems Auditor, and Account Information Clerk.
Truest gives you tools to understand your strengths, explore roles that fit, and plan your next move.
Explore Truest career tools