Junior It Auditor (information Technology Auditor)

Most days involve executing assigned ITGC procedures — pulling change tickets, sampling new user provisioning, testing backup and recovery procedures, and walking through application controls with system owners. You'll often coordinate with financial auditors who need IT control results to inform their substantive work, and senior auditors will steer scope and approach.

What's harder than people expect is the translation work — financial auditors don't always understand technology, and IT teams don't always speak audit. Sitting in between, you have to make both sides feel heard while still landing the finding. Variance is meaningful between Big Four (SOX-heavy, multiple clients), internal audit (deeper system knowledge, integrated risk programs), and regulatory work. CISA, CIA, or CPA tend to be the credentials that drive advancement.

People who tend to thrive here are comfortable being a translator, patient with documentation, and curious about both controls and the technology they sit on. If you want hands-on technical work, the role can feel more advisory. If you find satisfaction in proving that the technology under financial reporting actually works as designed, the work tends to open doors into security, GRC, or technology consulting.