Anyone here in cyber security but made a move to the IT Audit side? I've been on the technical side of IT for 15 years and 6 years in endpoint security. I'm looking to move into the IT audit\Compliance side.

like
Posting as :
works at
You are currently posting as works at

Why would you do that to yourself?

likefunny

Compliance has always been a side that I enjoyed. I enjoy for validation, remediation, consulting side more than what I'm currently doing which is mainly a mix between engineering, support and implementation my entire career. I want to be doing risk assessments and ensuring compliance.

like

I’m the opposite (in IT Audit trying to do Cyber) . I am curious as well what made you switch ?

like

So if that's your goal, IT Audit is not your solution, unless you know the position is about cyber related Audit. Sox Audit is about copy and paste, you are not invol6in risk analysis or anything.
You should move to GRC and Cyber Risk Management

like

I'd recommend GRC if you like compliance. IT Audit is a grind. I finally got out and moved to Security. Know that in IT Audit, you will always be second class to the financial auditors when it comes to getting involved with the business and executive leadership. IT is the odd one out.

likehelpfulfunny

@KPMG3 Networking. Years of doing good work, being involved in EBGs and professional orgs. I was asked to move over by security leadership.

So I am not an IT Auditor but I have many year in various internal auditing with experience in Operational audits, financial audits, compliance audits and oversight for IT audits. From what I have seen, it has been a very difficult transition for an IT person to become an IT auditor. It’s mainly trying to streamline reports for the audience because you definitely know your stuff but IT persons tend to go too deep or too wide that you blow the budget and can’t put together a report in a format for the end user to easily understand. This is totally my opinion of what I have seen from persons transitioning to IT audit from mainstream IT.

like

Why do you want to do such a move?
Just let you know, you will NOT touch any system. You will just see everything by looking at the SCREENSHOTS!

Ok this is a gross over simplification. Yes, documentation is tracked in screenshots in workpapers, sure, but I spend a lot of my days going into systems, error escalation, designing workflows, etc. so I guess YMMV

like

I did something similar, switched from cloud security engineering to technical grc.

Related Posts

I keep seeing people on LinkedIn with startup advisor and angel investor titles on top of their current corporate jobs. Would it be possible? Can everyone be technically an advisor?

like

Took a role out of desperation and it was a big mistake. The firm was toxic and crazy revolving door. After only a few months I was fired "for cause" even though no cause was actually given. Is this the end of my career?

like

Any transfer from tax to FDD? How was the learning curve from the transition ? And what were some unforeseen challenges that you didn’t expect?

like

Any thoughts on threat intelligence certs? Which ones are most worth the effort?

like

Current student looking for advice. I interned at RBC Wealth Management last summer and currently have 2 offers for summer 2023 that require a decision next week: 1 for BASF (chemical manufacturing) and 1 for Peraton (defense technology); I am also waiting to hear back from SMBC (S&T), Point72, Lord Abbett, Boeing, and Shell. I hope to break into banking next summer, and I’m interested in the Natural Resources, Industrials, and Real Estate industry groups. Any advice on what to do? Thanks!

like

How is the career growth in Apisero as Salesforce Developer. Is it good company to join Apisero as Salesforce Developer

like

What are your opinions on getting too much work in early phase of career? I have almost one year of experience and after switching to a new organisation I have like alot of work in my plate. I know it might be good for later part of career but just want to know your opinion. Tech stack .net, yoe <1

like

I have been promoted to 5.3 level from 5.2 in persistent systems . Can you tell me What designation would I be getting. Currently I am senior engineering lead

like

What do you think are the new things to learn in data engineering in Azure platform

If I get laid off, I have a previous colleague that started a cybersecurity company. I would love to get involved on the business side of it. Any pointers on skills that are attractive in this realm for a startup? Would be mostly (if not all) federal defense contracting clients. I’m currently in Deloitte’s cyber risk practice but my background and passion is in accounting and finance, and business operations. Graduated in 2017 so still early career.

like

I am a Business Analyst. I have 10 years of working experience in India. In May 2022 I will complete MSc Business Analytics from Maynooth university.
In the past I have lead a team of analyst performing multiple activities like sales analytics, web analytics on Google analytics, I have also worked as a scrum master in certain projects
I have worked with tools like tableau, power BI and now alteryx any suggestions for the job role I should look forward to?

like

I am a ServiceNow Developer and want to switch the domain. Confused about which one to choose. Can any please suggest some good domains.

Hi fishes,

How is it to work for Reliance Jio?
My tech stack is angular
And why they are giving deputy manager designation?
Is that the grade ?

like

Any former employment attorneys transition into HR? If so did you feel the need to get any degrees or certificate in HR?

Best books on leadership and self development?

like

Should I get a CPA for Transaction Due Diligence?
I’m a new grad working in FDD and I’m trying to decide if becoming a CPA is worth it. I do not plan on staying in accounting in the future. I’m more interested in strategy work. I certainly do not want to do Audit. Would you recommend getting the CPA considering my career aspirations? Do you think it’s worth it? If not, what is the best way to use my time efficiently?

like

Hi guys
Recently made a switch to Data Analytics space.
Here i am working on Power Bi.
Can anyone please tell me what other skills i need to have.
My current project is enhancement project
I know SQL but i hardly use it in my day to day work.
Do Power BI people really use SQL or only while creating OLAP views or please tell when do you guys use SQL?
Need to know if I am on the same page or not.

like

I’m studying for the SHRM-CP with the Mometrix (study guides, online course, and flash cards), however I’m super overwhelmed with all of the information. What are some best practices to ensure I grasp all of the concept ? Any advice would be much appreciated!!!

Anyone with connections to potential in-house scm opportunities in the NYC area?

At this point in my life, consulting is really burning me out, would love to be in house where I can learn and grow at a pace that is more sustainable.

like

More Posts

What is the hierarchy at Pune. What does a VP do and what are these A,B,C grades? Can a salary of 75 lacs be offered at a VP level?

likefunny

Does anyone know if the 10% penalty and if taxes are waived on a death of a beneficiary? A friend of mine’s 17 year old pass away. I was wondering due to the circumstance, is there any way he can get around paying extra money by doing a 1035 exchange, rollover, withdrawal. Anything out there? Suggestion are welcome.

American Express - How long is the probationary period for a new hire ?

helpful

Interviewed for Meta exactly 2 weeks ago today. Contacted the recruiter last Tuesday and they said they were waiting to hear back from the hiring manager to discuss the interview results. Anyone that interviewed or gotten a job with Meta how did it take from the onsite to get your decision? Since I had to reach out to the recruiter and haven't heard anything since I assume they're interested in another candidate.

like

Hi All, I have an technical panel interview with BlackLine for Senior software engineer. Did anyone recently interview with them, i just wanted to know what was hacker rank coding question level and interview experience , Thanks in Advance BlackLine

like
like

Is it bad form to meditate while you’re lying down in bed? Asking for a friend

like

Are most companies paying for you to learn new skills? When acquiring new skills are you mostly self taught? What are your best go to sites for learning animation or video skills? Trying to gauge the norm on expectations for new hires who need to know everything from print, web, video, social and animation. Can you do it all?

like

Anyone else experiencing burn out from calendars being un-realistically moved up? We used to start spring costing in may !

I was on costing calls with my Vendors until 3am negotiating costs and had to be up at 6 am for a call with Pakistan vendors. Only to then work a full day and have another late night call tonight … it doesn’t end. 🫣

like

Hi Fishers, I have accepted Walmart offer and my BGV has started 3 weeks ago. How do I check my BGV status? I will be joining in mid May. Also, I have been hiding one of the company where I had worked for 45 days and then absconded due to personal issues. Would it create any trouble? They had created my PF account though. Any help would be highly appreciated

like

Hi Fishes,

I am working in Capgemini past 2.5 yrs in Power Bi domain and total i have 5 yrs of exp in IT industry. But my salary is same as my experience 5 LPA. I know i am getting underpaid. If anyone can refer me help me out ...i can give him my first salary... I am at a high debt.

like

2 offers - Stripe vs PayPal? Similar pay/roles. Seems like PayPal is a much more diversified established business, but stripe is a hot name. Thoughts / advice?

like

salary band for Accenture Management Consulting 2nd year Manager in Chicago (Tier 2)? Was offered $120k base. Thoughts?

like

Is there any band at each level? If yes what is the starting band for Manager level and min salary package?

How is Data analytics at PWC gurugram office? or PWC india in general.

YOE- 2years - What can I expect the ctc to be?
Current CTC- 9.5 LPA

like

I received a verbal offer for a VP position at CCB line of business at JPMC in NYC two weeks ago. The recruiter asked for salary expectations but there was no number set. It’s been two weeks since and complete radio silence. I sent an email to a hiring manager a week ago but received no reply. It’s August so people could be on vacation but this is really strange. Has anyone had similar experience?

like

I have a call with a PwC recruiter next week, any advice on negotiating pay? Any suggestions on the pay band at Senior/Manager, internal audit in the mid America region will be appreciated. Thanks!

like

Hii sharks 🦈🦈🦈🦈

Can anyone of you please help in calculating how much will be my income tax per month(I am availing the Old tax regime)? Different IT calculators show different figures, not sure which is correct :(

And as for the interest amount in the Savings Account and Fixed Deposits, do both fall under "Income from Interest"? Or under "Other Income"? Or does Interest amount in Savings account fall under "Interest from Deposits - 80TTA"?

The figures are given in the screenshot 👇🏻

Post Photo
like

Anyone with US Trust as a PCA? Looking for additional details in terms of the culture, day to day type of things and how you’re doing there vs. what the recruiter stated was the average?

like

Corporate attorneys in NY, how many hours do you work? Please also list your year. Thanks!

like

Additional Posts in Risk Assurance

Has an tested roles for SAP through productive test simulation within production? Is there any risk doing this as the test is in production?

like

I have a Deputy CISO who constantly instructs us to not go to HR with top level compliance issues (because JP Morgan Chase frowned upon it). But these issues are pervasive to tone at the top and could cause non compliance. What should I do?

like

Currently in external audit but making the switch to internal audit and enterprise risk advisory in the city, how does the work compare? Any advice?

like

Anyone have experience in HITRUST? What is it like?

like

What’s it mean if your boss tells you to start looking for a new job? What would be your first step?

like

What are the best exits from risk assurance? Is it possible to lateral into tech or no?

like

Any idea on what I industry senior risk analysts are making?

like

Thoughts on messaging on the 10/21 Risk Assurance transition webcast for those staying in Assurance? Still as clear as mud.

like

Im looking at new job opportunities out side of PA but struggle to confidently answer how much I’m looking to be paid. I’m so worried of over asking or leaving money in the table.
I’m in a SoCal HCOL and have been asking for 100k for Senior Internal Audit Roles (2 years) and working on my CiSa.
Is that too optimistic?

like

I lead our SOC practice for a US mid tier cpa/consulting firm. I've been losing a lot of deals due to lower cost / boutique vendors who are partnered with these SOC automation platforms (Vanta, Laika, etc.). Have any of you used these tools for the audit and what has your experience been like? Thanks

like

What’s your worst experience with a senior? (As an associate)

Any strong performing seniors looking for a pay increase and potential fast track to manager? Reach out to me. Expanding the team and would love to bring in some new talent.

like

London, Dublin, Luxembourg, Munich. Choose a place to move to from NYC. Fuck H1B.

Does anyone still have an active Becker account that I could borrow for 2 months to study for my REG exam? Please! Thanks!

like

Are the exit opportunities better in Internal Audit/Business Process than IT Audit? All I hear is how awful IT Audit is but don’t hear as much complaining from the business side

like

What exit ops are there outside of testing controls all day? Getting tired of this. Resume is ready

likefunny

Currently a first year staff in Risk Advisory in a Mid-Tier Firm hoping to move to Big 4 for either Risk or Cyber. When would be the most appropriate time to make the change? I heard that Senior Staff in mid-tier would most likely be hired as an “Experienced Hire” in Big 4. So would it be smarter to make the move now as a first year staff since I’ll be considered Experienced Hire anyway?

like

Risk fishes I’ve got an question. Would it be really beneficial to do MBA as a Risk consultant and would it be an enabler for me to step up towards being a partner in the big4?

like

How do you tell your boss you're quitting without burning bridges? Please note we're in busy season for the engagements I've been staffed on, which is what makes me nervous and guilty. TIA

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal