Related Posts
“I just want to see her cry” — People! Wtf!
I need one like to start chats. Appreciate your help
Gents - What perfume/cologne brand do you wear?
Additional Posts in Audit Bowl
New to Fishbowl?
Download the Fishbowl app to
unlock all discussions on Fishbowl.
unlock all discussions on Fishbowl.



I very slightly moved out of IA, but have stayed adjacent - I don't feel pigeonholed, but I'm also not really desiring to move to something very different; my comp, WLB, and career progression are all great and have a strong path forward. If you're not looking to stay in IA (or GRC generally) long term, I'd start the transition process out now (to audit, tax, accounting, FP&A, etc etc).
Here's my path below:
- 2019: Started in KPMG's Internal Audit & Enterprise Risk service line, primarily doing BP IA and SOX co/outsource work for clients. Slowly transitioned from full BP to hybrid BP / IT IA.
- 2022: Left KPMG as a Senior Associate, went to a boutique consulting firm, now as a pretty 50/50 split hybrid BP / IT internal auditor. Slowly transitioned from hybrid to full IT IA.
- 2025: Left consulting as a Manager, joined industry as a Senior IT Risk Manager. While IT SOX is still a part of my work, my scope has expanded to include PCI DSS, FedRAMP, TPRM, and SOC compliance activities. Definitely IA related, but no longer purely IA.
Happy to answer questions, best of luck!
This is new for me. And no I see this as another stepping stone of learning. Most of my audits had some internal controls controls and compliance auditing in it so this is just more indepth. But I definitely dont think id be very good at this if I hadnt done external auditing.
I can get out but the culture in external audit firms is something I don't like including expectation to work longer hours. But external auditors are respected way more than internal auditors lol. I felt this and even my friend feels the same.