Essential IT auditor skills
Estimated Read Time: 3 minutes
IT auditor roles demand skilled technical workers, who can work either internally (within the organisation) or externally. What’s more, these roles are in high demand across industries – so salaries for this role run equally high.
According to the Robert Half 2023 Singapore Salary Guide, the midpoint salary for an IT auditor in Commerce and Industry is $104,000 and can hit a high of $125,000 in Financial Services too.
Why it is crucial you hire the right person for the job
Since an IT auditor will be responsible for ensuring your organisation’s IT systems and infrastructure run as efficiently as possible, it is imperative that you hire a candidate who will look towards the long-term wellbeing of the organisation’s IT ecosystem.
In addition to hiring a candidate who is well-trained who can ensure your IT systems are in compliance with government and internal regulations, a skilled IT auditor will be able to identify potential issues before they arise and offer solutions to them.
Vulnerabilities, attacks, and confidentiality leaks can cost organisations thousands, if not millions. For this reason, it is also important that your organisation’s IT auditor is comfortable with risk assessment and data analytics.
An experienced candidate will have a proven track record of performing risk-based audits to reduce risk, deploying IT compliance framework (per industry standards) for secured operations, risk mitigation, and most ideally, a year-on-year improved audit plan.
Related: Which cyber-security skills are in-demand in Singapore?
Skills to look out for on IT auditor resumes
Technical skills
Since the role requires auditing – specifically, data analysis and risk assessment – candidates need to be comfortable using tools to analyse large data sets. Subsequently, IT auditor candidates will need to be able to take the findings of their analyses and make adjustments or suggestions where needed.
The tools required for this can be as basic as Excel or as advanced as Audit Command Language (or ACL). In addition, most experienced candidates will also have résumés that showcase several frameworks (including COBIT and PCI), databases (including Oracle, DB2, SQL, SOAP), and an assortment of programming languages.
Communication skills
“IT auditing is a lot more teamwork than you’d expect – so it really helps to have a team player,” says Prashanth Krishnappa, senior recruiting manager and specialised technology recruiter at Robert Half Singapore. Since IT auditors work across multiple teams in an organisation, it is essential that candidates are able to communicate their needs and any technical requirements and expectations with those they interact with.
“Apart from the fact that IT audits – like financial ones – are intimidating,” says Prash, “it’s in everyone’s best interest that the IT auditor can communicate well.” Primarily, this ensures that employees the IT auditor encounters are cooperative, and their concerns, suggestions, and feedback is heard.
Related: Essential IT skills to break into the tech industry
Project management skills
Candidates must be able to carry out audits in a timely manner within a set budget. Thus, it’s important that candidates have a demonstrable history of project management – being able to plan and organise an audit as well as evaluate outcomes and adjust results.
Additional skills that an ideal candidate will possess
Critical thinking skills
Critical thinking skills are really what set good candidates apart from excellent ones.
- Prash
While many candidates are able to follow standard operating procedure before, during, and after an audit, quality candidates can think outside the box. “An IT auditor who is able to identify potential problems and risks – and advise their employers on their best course of action – can save an organisation resources and time down the road,” adds Prash.
Business savvy
Although not technically a skill, the ability for an IT auditor to understand both their industry and day-to-day goings on within an organisation can allow for a smooth workflow. An IT auditor who has a sense of budgetary constraints for a business, for instance, is more attuned to the business’s auditing needs. Additionally, this makes it easier for the IT auditor to communicate the organisation’s requirements to executives.
External IT auditors vs internal auditors
Typically, external IT auditors work for consulting firms and assess control environments of public companies (with regulatory reporting guidelines). On the other hand, internal IT auditors assess an organisation’s internal controls, to strengthen its control environment.
While there is certainly an overlap in skill, it often benefits companies to use both. However, an internal IT audit minimises overall costs, and partners with business, accounting, and financial audits for “integrated” audits.
Certifications to look out for
Lastly, when distinguishing between candidates who are on par in every other aspect, it is highly worthwhile looking out for specialised certifications. Apart from validating a candidate’s skillset, certifications ensure increased knowledge and skill development, and more robust security training.
4 common certifications for IT auditors include Certified Information Systems Auditor (CISA), Certified IT Auditor (CIA), Global Information Assurance Certification (GIAC) Systems and Network Auditor Certification (GSNA), and Certified Information Systems Security Professional (CISSP).
Related: Hiring and management advice
Need help finding an IT auditor for your company? Contact Robert Half to help you find the right candidate.
