1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
|
#+date: <2025-05-30 Friday 10:53:28>
#+title: Accelerate Your Audit Career with Emerging Tech Insights
#+description: Explore actionable steps for auditors to master AI, blockchain, cloud computing, DevOps, and automation in audit and assurance roles for career growth and future readiness.
#+filetags: :audit:
#+slug: it-audit-career
* Introduction
As trends have shown, the auditing and assurance world is increasingly becoming
overwhelmed with topics like [[https://kpmg.com/xx/en/what-we-do/services/ai/trusted-ai-framework.html][AI]], [[https://pcaobus.org/Documents/Audits-Involving-Cryptoassets-Spotlight.pdf][Digital Assets]], [[https://kpmg.com/us/en/articles/2023/building-trust-cloud-environments.html][Cloud]], [[https://kpmg.com/us/en/articles/2023/role-of-internal-audit-devops.html][DevOps]], and [[https://kpmg.com/ch/en/insights/technology/audit-transformation.html][Automation]].
While these trends are rapidly transforming businesses and industries, audit
firms and departments are working hard to ensure they stay aligned with business
objectives.
Throughout my career, I've seen topics like "AI" evolve from LLM-based projects
used by data scientists to everyday tools accessible to the masses and integrated
directly into business operations.
As an auditor, skills in emerging technologies are an invaluable asset that can
translate into massive career opportunities and long-term job security.
I have experienced this firsthand as topics like automation, AI, cloud
assurance, and DevOps have kept me in a secure position with significant potential
for growth and learning.
In this post, I'm going to walk through the process of becoming skilled in an
emerging technology and how to translate that into a rewarding audit career.
* Step 1: Build a Strong Foundation in Audit & Risk
To start, I want to note that learning about emerging technologies is only
useful if you already have a base in auditing. You can't audit a cloud
environment with cloud knowledge alone — you also need to understand the
fundamentals of auditing.
If you find that you're highly technical already, focus your time on learning
audit standards and guidance.
You can customize this to any frameworks applicable to your company or industry,
but these are generally the baseline for an audit career:
- [[https://www.coso.org/Pages/default.aspx][COSO]]
- [[https://www.nist.gov/cyberframework][NIST CSF]]
- [[https://www.iso.org/isoiec-27001-information-security.html][ISO/IEC 27001]]
- [[https://pcaobus.org/][PCAOB]]
- [[https://www.aicpa-cima.com/resources/assurance][AICPA]]
The consistent theme throughout these frameworks is that audits rely on
independent parties who provide consistent documentation, appropriate
considerations of risks and responses, scoping, and reporting.
One of the easiest ways to get this knowledge is by doing. While it can be
challenging, the concept is straightforward. If you are working in a role within
a department like internal audit, external audit, risk, compliance, etc., focus
on performing your role exceptionally and continuously challenge yourself to
learn more about audit and risk each day you work.
* Step 2: Learn the Tech That's Changing the Profession
Getting to the point of this post, there's a wide range of technologies transforming the audit
world. To accelerate career growth and discover a niche you enjoy, I've compiled
a short list of topics that are currently (1) growing in demand, (2) have a need
for more experts within the audit field, and (3) are expected to remain relevant.
- *Automation & Data Analytics*: Alteryx, Python, Power BI, Tableau
- *Cloud*: AWS, Azure, GCP, IBM
- *Blockchain*: Decentralization, smart contracts, chain of custody
- *DevOps*: Azure DevOps, CI/CD, DevSecOps, GitHub, GitLab, Jenkins
- *AI/ML*: AI in business, AI in auditing, AI assurance
#+BEGIN_QUOTE
*Pro Tip*: Tackle one area at a time. You don't need to become an expert, but
make sure you learn enough to conceptualize the technologies and logic behind
the topics you're auditing.
If you focus on one at a time, you can dedicate time to that sole topic to
understand it more deeply before moving on to the next.
#+END_QUOTE
* Step 3: Earn Certifications That Signal Credibility
If you don't have much experience, or can't demonstrate your knowledge in a
particular area due to job constraints or otherwise, you can utilize courses
and certifications to boost your credibility. This is an effective way to
establish credibility and demonstrate your qualifications.
- [[https://www.isaca.org/credentialing/cisa][CISA (Certified Information Systems Auditor)]]: Core certification for IT
auditors covering systems, controls, governance, and assurance.
- [[https://learn.microsoft.com/en-us/certifications/azure-fundamentals/][Microsoft Azure Fundamentals (AZ-900)]] / [[https://aws.amazon.com/certification/certified-cloud-practitioner/][AWS Certified Cloud Practitioner]]: Entry-level
cloud certifications covering core cloud concepts, services, pricing, and
security.
- [[https://www.alteryx.com/certification/designer-core][Alteryx Designer Core Certification]]: Validates your ability to build data
prep, blending, and analytics workflows in Alteryx.
- [[https://www.coursera.org/professional-certificates/ibm-data-science][IBM Data Science Professional Certificate]] (via Coursera): Teaches data
science fundamentals, Python, SQL, and AI basics; popular for aspiring data
auditors and analysts.
- Entry-level technical certifications:
- [[https://pythoninstitute.org/pcep][PCEP (Certified Entry-Level Python Programmer) by Python Institute]]
- [[https://www.edx.org/learn/artificial-intelligence][AI certifications on edX]] covering foundations, governance, and AI ethics.
- [[https://www.blockchain-council.org/certifications/certified-blockchain-professional-expert/][Certified Blockchain Expert]]
I have earned the following certifications and have seen great responses
throughout my career due to the credibility they provided in these focus areas:
- GitLab Certified Git Associate
- GitHub Foundations
- Alteryx Designer Core Certified
- Microsoft Certified: Azure Fundamentals
- Certified Information Systems Auditor (CISA)
- Certified Entry-Level Python Programmer (PCEP)
- Data Science Professional Certificate
- Cybersecurity Audit Certificate
* Step 4: Join Emerging Tech Projects and Pilots
Once you have the knowledge and, if applicable, the credentials to showcase your
skills, you need the chance to network and show what you can do.
To do this, I recommend joining a group focused on the topic you're passionate
about. Normally, this is easiest within your own company. However, sometimes you
may need to seek other opportunities in your community or online to find the
project that works best for you.
- Seek opportunities internally: AI pilots, automation and data analysis
projects, blockchain initiatives.
- If they don't exist — propose them.
- Suggest automating risk assessments, piloting AI tools, or testing continuous
assurance routines.
*Why this matters*: These projects become resume differentiators and position
you for leadership roles.
* Step 5: Build a Network of Tech-Savvy Auditors & Consultants
As a segue from Step 4, ensure that you have a network of like-minded
individuals who can challenge you and expose you to new ideas. This helps keep
you sharp and open to innovation. Some suggestions include:
- Join ISACA, local AI/ML meetups, blockchain working groups.
- Engage with emerging tech communities on LinkedIn — share posts, comment on
thought leadership, or publish insights.
* Step 6: Stay Curious and Keep Learning
Last, but not least, keep learning! While you may feel like you know everything,
there's always more to explore. I enjoy revisiting known problems from different
perspectives, as it's helped me grow and realize that alternative approaches
often yield better results with experience.
- The landscape is changing rapidly — stay current on AI regulation, blockchain
security, cloud assurance frameworks, or whatever interests you.
- Subscribe to niche newsletters (e.g., The Cybersecurity 202, AI Ethics
Weekly).
- Take one course or certification per year to stay sharp.
* Closing
You don't need to be an engineer or software developer to thrive in technology —
but you do need to understand enough to assess risk. With these steps, I have
found a wonderful and fulfilling career, and I know you can too.
If you have any questions on how to break into tech risk and audit, feel free to
reach out over email or anywhere else — I would love to connect and chat!
|
