Senior It Auditor (Information Technology Auditor)

Most weeks involve leading audit engagements, mentoring juniors, and engaging with IT and audit leadership. You'll often own scope on complex IT audits (cloud governance, ITGC for material applications, DevOps and CI/CD controls, AI/ML risk), coordinate with financial auditors on integrated reviews, lead investigations on suspected control failures, and present findings to audit committees or client leadership. The work increasingly involves emerging-technology risk evaluation.

What's harder than people expect is staying current with technology evolution — cloud, AI, DevOps, and zero-trust security each shift audit expectations, and senior auditors who can't evolve become less effective over time. Variance is significant between Big Four (multiple clients per year, SOX-heavy, often technology-transformation work), internal audit at large enterprises (deeper integration with risk programs), and specialized technology risk consulting (M&A diligence, regulatory examinations, transformation programs). CISA is foundational; CIA, CISSP, or specialty cloud credentials valuable.

People who tend to thrive here are technically credible, comfortable with continuous learning, and skilled at translating between technology and audit. If you want pure engineering or hands-on operations, the audit posture remains administrative. If you find satisfaction in owning the audit conclusions on technology supporting major business functions, the work tends to lead into senior IT audit director roles, technology risk leadership, or transformation consulting.