Junior Data Processing Auditor

Most days tend to involve assigned controls testing, evidence collection, and documentation under senior supervision. You'll often test user access reviews, review change-management approvals, validate batch job controls, and prepare workpapers that document how data flows through key systems. Engagement cycles drive the cadence.

The variance between settings is real — internal audit shops at large enterprises have specialized junior IT auditors learning under senior IT auditors; Big Four and second-tier external audit firms train IT audit juniors who support financial audit engagements with SOX IT general controls testing; consulting firms deliver SOC 1, SOC 2, and similar attestation work. Technical depth builds from foundational systems knowledge.

People who tend to thrive here are comfortable bridging audit methodology with technical systems thinking, patient with the documentation rigor, and willing to learn cloud and infrastructure concepts. CISA candidacy anchors most career paths. The work tends to offer strong demand and clear ladders toward senior IT auditor, manager, and director seats, with the trade-off being the constant catch-up as technology evolves — but the foundation transfers across audit and security careers.