r/itaudit

Hi, I have 3 years of experience in ITGC / IT Audit 52-109 (the Canadian equivalent of SOX) in industry. I started this job directly after graduating from university. I don’t have any Big 4 experience, and I’m currently preparing for the CISA with the goal of eventually working abroad, especially in the Gulf region or Malaysia.

I’m wondering if the CISA will actually help me with that, or if I’m being delusional and still not experienced enough to expatriate.

Hi everyone, I’m currently working in Technical Support and have a background in networking and cybersecurity. I have CCNA and Security+, and I’m also preparing for ITIL Foundation.

For a few career-related reasons, I’ve decided to move toward IT Audit / Technology Risk and want to learn it properly from zero.

What course or resource would you recommend for learning practical IT Audit, especially ITGC, risk & controls, evidence testing and audit methodology?

Also, should I start directly with ISO 27001, or first learn the fundamentals of IT Audit and then move to those frameworks?

Preferably something beginner-friendly and not only focused on passing CISA.