Infocomm TechnologyStrategy and Governance

IT Auditor

The IT Auditor determines audit objectives and activities by examining changes to the technological landscape, regulations and the organisation's IT assets and technologies to identify potential risks to IT assets. He/She assists in the development of an IT audit plan which includes outlining all workflows and audit activities. He conducts audit activities as per audit plan and analyses IT business controls and processes against organisational and industry standards to identify areas of non-compliance and potential risks. He assists with investigation and the preparation of documentation of work performed and develops reports. He also identifies potential recommendations to enhance compliance and address risks identified. He works in a dynamic environment due to rapid changes in the IT landscape. He is knowledgeable of relevant regulatory requirements and internal auditing standards, particularly in the area of technology risk management. The IT Auditor has a natural ability to process diverse sets of information and see relevant interdependencies and linkages. He is inquisitive and observant when analysing issues and is able to effectively articulate concepts and ideas.

What Does a IT Auditor Do?

Key Responsibilities & Tasks

Develop IT audit plans

  • Conduct research on technological landscape and regulations to analyse its impact on the organisation’s IT audit plans
  • Identify potential risks to IT assets
  • Analyse changes to the organisation's IT assets to develop IT audit requirements
  • Identify required IT audit workflows and activities
  • Assist in the development of an IT audit plan

Implement IT audit plans

  • Conduct audit activities in accordance with the IT audit plan and requirements
  • Analyse IT controls and processes against organisational and industry IT standards
  • Identify areas of non-compliance to IT standards and potential IT risk
  • Gather evidence to identify root causes of areas of non-compliance
  • Document evidence and IT audit conclusions

Enhance IT compliance and risk management

  • Provide recommendations to enhance compliance to IT standards and address IT risks identified
  • Develop communication and presentation materials to share IT audit findings and recommendations
  • Drive awareness of IT controls across organisation
  • Promote best practices and raise organisational awareness on matters relating to governance, risk and compliance
  • Monitor resolution of identified non-compliance and risks

Do You Have the Skills for This Role?

A IT Auditor needs 4 core competencies. Here's what's required and at what level.

Must-Have Skills (Advanced)

Decision Making

Advanced

Thinking Critically

Communication

Advanced

Interacting with Others

Customer Orientation

Advanced

Interacting with Others

Supporting Skills

Digital Fluency

Intermediate

Staying Relevant

SkillsFuture Skill Levels

3 levels
1

Basic

Recognise and understand fundamental concepts. Apply skills in routine situations with guidance.

2

Intermediate

Apply skills in varied situations independently. Analyse problems and adapt approaches as needed.

3

Advanced

Lead and innovate in complex situations. Evaluate strategies, guide teams, and drive improvements.

Technical Skills & Competencies (TSC) Levels

6 levels
1

Follow

Carry out routine tasks under close supervision. Follow established procedures and guidelines.

2

Assist

Perform tasks with some independence. Assist in non-routine situations and apply established techniques.

3

Apply

Apply skills and knowledge independently in varied situations. Analyse problems and adapt approaches.

4

Analyse

Analyse complex situations and develop solutions. Guide and mentor junior colleagues.

5

Strategise

Set strategic direction and drive innovation. Evaluate trade-offs and make high-impact decisions.

6

Transform

Lead industry transformation. Establish standards, shape policy, and provide expert advisory.

Technical Skills & Competencies

A IT Auditor requires 13 technical skills at specific proficiency levels.

IT Governance

Level 4

Governance and Compliance

Develop and implement standard operating procedures based on IT policies and practices, ensuring compliance with standards and regulations

IT Standards

Level 4

Governance and Compliance

Review current practices of performing IT-related activities, and propose revisions to service standards and protocols

Quality Standards

Level 4

Governance and Compliance

Assess existing quality standards and align processes and activities with IT product and service quality expectations

Audit and Compliance

Level 3

Governance and Compliance

Conduct audits, analyse results and implement changes to address identified gaps

Budgeting

Level 3

Business Finance

Prepare business unit’s operational budgets

Business Performance Management

Level 3

General Management

Monitor performance of the department

Business Risk Management

Level 3

Business and Project Management

Identify risks and their business impact and propose measures to manage risks

Data Analytics

Level 3

Business Development

Develop, apply and evaluate algorithms, predictive data modelling and data visualisation to identify underlying trends and patterns in data.

Networking

Level 3

Business Development

Identify and analyse business opportunities

Partnership Management

Level 3

Stakeholder and Contract Management

Support the development and coordination of partnerships with external stakeholders and organisations

Process Improvement and Optimisation

Level 3

Business and Project Management

Identify and Implement the adoption of process improvement and optimisation methods

Stakeholder Management

Level 3

Stakeholder and Contract Management

Serve as the organisation's main contact point for stakeholder communications, clarifying responsibilities among stakholders, and engaging them to align expectations

Strategy Implementation

Level 3

Strategy Planning and Implementation

Analyse strategies for critical business functions to ensure plans are within risk mitigation factors

European Skills Framework

ESCO

Skills and knowledge areas required for this occupation based on European classification.

Career Paths from IT Auditor

Explore related roles in Infocomm Technology that share similar skill requirements.

Will AI Threaten Your Job?

78
Low riskVery High RiskHigh risk

Most at risk

quality standardsprepare financial auditing reportsWorld Wide Web Consortium standards

Most resilient

cloud technologiesorganisational resilienceICT process quality models
View full AI disruption analysis →

Quick Facts

TrackStrategy and Governance
Core Skills4
Technical Skills13
Key Tasks15

Is IT Auditor right for you?

Take the free 10-minute Career Portrait to see which career direction fits your motivations and strengths.

More in Infocomm Technology

Explore all career paths in the Infocomm Technology sector.

View all Infocomm Technology roles
Check Your Readiness