An information technology (IT) auditor performs in-depth analysis to monitor the performance of specific technological functions designated by management.
To perform the audit, they must apply sound methodology to gather evidential data. After gathering data that is pertinent to the function or area, the auditor then analyzes the data to form an objective opinion pertaining to the effectiveness, efficiency, and adequacy of the internal controls of the activity being reviewed. Upon forming their data-based opinion, the information technology auditor then creates a report to present to management and conclude the auditing project. The reports are often both verbal and written, and they must be concise, complete, and containing the information that is necessary to support the auditor's conclusion. The auditor then works with management to ensure that the functions - and any recommendations - comply with company procedure.
Due to the technical and financial nature of the position, most information technology auditors hold a bachelor's degree in information systems management, computer science, accounting, finance, or a related field. They encounter a wide variety of problems and are often required to work independently and under minimal review. Strong oral and written communication skills are important, as is the ability to use standard office software. Many of these positions require substantial travel, as the auditor must often travel to specific sites to gather the appropriate data.
Information Technology (IT) Auditor Tasks
- Plan, execute, and lead audits across the organization to evaluate risks and risk management.
- Document findings and recommendations, as well as current processes and procedures.
- Work with departments to increase compliance, manage risk, and improve overall effectiveness.