How would one transition from 3rd line IA into 2nd line risk and is it a better job?

like
Posting as :
works at
You are currently posting as works at

I’m seriously considering this too. I think I know audit enough and I need the ERM type experience rn

smart

I did so by just applying, skills are there for many jobs unless they are VERY Security heavy which tbh, most aren’t. I switched to Risk focusing mostly on SOX for a new public company, great experience and in non-Sox time got exposed to more security related work. After a year I found it pretty dull however, but I also think that was because we were done with the heavy grunt work of getting sox controls ready for year 1, etc. you do work less overall on risk based on my experience. Recently transitioned to internal IA for a F500 since.

like

It took me 15 years to get out of third line, and I should have done it much earlier. I finally got out through networking and demonstrating my effectiveness. I got asked to lead a second line team, and trust me, the grass is definitely greener. All that toxic Big 4 crap that follows you into internal audit because half of them came from public just doesn't exist in the second line.

like

IAM. They got tired of me constantly issuing access findings that they asked me to lead the team to get it fixed. I say that only half joking. The other part is that I've spent years networking with the security team, volunteering at conferences, attending chapter meetings. Almost 10 years ago now, I had been doing a cybersecurity audit, and one of the security managers suggested I go for the CISSP, which was a pain, but I passed.

I never intended to end up in security, but I guess I've been playing the long game for a while now.

like

What's 3rd line to 2nd line?

like

https://www2.deloitte.com/us/en/pages/advisory/articles/modernizing-the-three-lines-of-defense-model.html

Related Posts

Has anyone here transitioned into product marketing from a PR role or some similar area like content marketing, brand, or creative? How did you make it happen?

like

I have total 6.3 years of Experience in IT and willing to make a career outside IT in sometime and also not quite interested in pursuing MBA . What are other alternative options I have in india .

Is anybody familiar with the CIA challenge exam?

I am currently a CPA debating if I should work towards a CIA certification.

If I read this correctly I can forgoe some of the CIA exam since I am already a CPA. Is this correct?

likehelpful

I have an interview with McKinsey - Senior Associate, the role pays 50k more than my current role. (3YOE)
I have no consulting experience nor do I have an MBA. Somehow I’ve passed the first 3 stages and I am now onto the case study interviews.
Has anyone went from product management into consulting, is it worth it, Am I making a mistake? (London, UK)

like

Hi all, Anyone out there certified for a associate google cloud engineer certification, may I know the difficulty level and exam point of view setup

Hi Fishes,
I am not sure whether this is the right portal or not still I am going to go ahead with my question. Does anyone know a good online course to enhance coding skills (in R and Python) from the point of view of credit risk Analytics, modelling.

like

Hello Fishes,

Need your input please

If i get lowballed package with good learning curve. Is it better idea to stick to it for next eight month and make another switch to recover the loss? Or should I search better job ? I have only 20 days left in notice

like

Would taking a director of legal operations position (jd preferred or a plus) make it hard to get back to practicing in a firm or another company?

like

Could anyone share ISSP certification study guides or general info?

Hello Fishes ...
Please help me

I'm looking for a entry-level role in finance domain and I would appreciate your support.

Recent MBA-FINANCE graduate with a focus in Investment banking, Financial markets, Financial analysis and reporting

If anyone knows of a job opening where I would be a good fit, I'd appreciate if you could send them my way! Of course, if you have any suggestions for where to start my career, or anyone you'd recommend I speak to, I would be very grateful.

like

👋🏼 HI! 34 yo female looking to break into an entry level sales role (pharmaceutical/health/wellness) related ideally. But open to where I need to start to get my foot in the door. Would appreciate any leads on Hybrid sales roles in the Austin area! Or even more networking resources aside from here and linked in 😊.

What made you go into law enforcement?

like

Getting out of M&A? I am a 3rd yr at a V30 and want to get entirely out of M&A and do more licensing/media/entertainment work. Willing to take paycut and be retooled. Any idea where to begin?

like

How many years did it take you to get promoted to senior software engineer?

like

How to get into Human Resources with a Master Degree in Psychological Organization Leadership

like

I graduated in 2016, did a state court clerkship, and then was hired as a hearing officer. I’m looking to apply for an attorney advisor position but wonder if my lack of ‘traditional’ legal work will harm my chances. Thoughts?

Anyone here started their own government contracting company and subcontracted with other Primes? It’s been something I’m leaning towards as I’ve been building the network for it. I know it’s a bit niche, but would love to hear about other’s experiences.

like

Controversial question - what are some roles/functions to avoid at Google for ex-management consultants, in terms of potential under-utilization of skills and limited career progression? Common exit opps tend to be in StratOps, PMM, PgM/Solutions Consultant, roles in Sales; would anyone not recommend any of these roles?

like

Is the CPA designation worth it? For me it would take me 1 year of PREP courses and 2 years of PEP until i can write the CFE. And I am 27 years old right now. Also wondering if it would be crazy to pursue the CPA while learning how to code to be a developer as well?

like

FDD/TAS Senior > Restructuring (Rx) analyst or associate (FAS/Banking) - Has anyone seen it done before? Would starting from Valuation instead of FDD be a better stepping stone to Rx banking. Also, I would imagine the best Rx banking exit would be to HL. Is FTI Rx (FAS) considered better than EY-P Restructuring consulting? How about compared to AM Rx (FAS). Thanks for any input!

like

More Posts

I hate due diligence requests. Every time my email notification pings I want to cry. I’m already going as fast as I can.

like

Guys, what's the salary range for senior manager in PWC SDC with 11 years of BA experience? PWC SDC

like

This one was harder.
Wordle 213 5/6

⬜⬜⬜🟨⬜
⬜⬜🟨⬜⬜
🟨⬜🟩⬜🟩
⬜🟩🟩⬜🟩
🟩🟩🟩🟩🟩

likeuplifting

In light of everything that is going on, I would like to quote a simple yet powerful line from Prophet Mohammad (SAW) last sermon, in which he (SAW) says:

“A white has no superiority over a black nor a black has any superiority over a white – except by piety and good action.”

like

LIRR is packed today, there’s rumors my job is moving to Tuesday - Thursday in the office. Are a lot of office bringing back employees?

like

Is tcs calling all employees to work from office

like

Hello, Can someone refer me at Amazon. I have 16 yrs exp working in Accounts & French operations. Looking for day shift opening only. Thanks in advance!

like

Hi do you interview from time to time just to check what’s your market worth?

like

Any advice on moving from L4 to L5 in Amazon?

like

Hey beautiful people,
I’m 27Y and work in tech. Unfortunately my carpal tunnel is getting worst slowly. I’m worry that I still have like 45 years more to be retired and can’t stop working because I have a f* mortgage to pay 😭 I have a super ergonomic workstation, but I know my hand needs a long rest, and I can’t do it… Does anyone relate? What do you recommend?

like

Anyone worked at multiple FAANG companies? I’m trying to choose between 2 and can’t decide.

like

YOE - 10
Current package - 15 lpa + 3 lpa stocks
I'm interviewed at wipro for lead Position for service transition team.
2 rounds of technical completed
1 more round with head is completed
HR called me asking for expected salary.
I said 30 to 40 %, he said he will talk to business and come back
It's been 3 days since the hr call, I've not got any call yet.
How much I can ask for ?
Or I much I could have asked ?
What's the salary for b3 band with 10 YOE ?
IsJoining service transition team good?

like

Who is still in denial about a housing correction? The Fed just made another .75% increase. Powell said they won’t stop until inflation is 2%. He also said a recession would be better than the consequences of unchecked inflation. He announced he will bring rates to a “restrictive level” until “the job is done”. He said that labor demand needs to soften (ie: layoffs). He very explicitly said he wants to slash demand and that housing needs a “correction”.

like

Anyone have a ticket for Meduza at district this Saturday and not going anymore? It’s $57 now with fees and that’s too much. Might as well buy the VIP which is $80 w fees but that is probably a huge scam so guess I’m not going

What is the courtesy of withdrawing an offer you already accepted?

How much annual salary increment is there in citiustech?
And if someone is getting promotion then what is the scenario?

likehelpful

How long does it takes to get the offer letter post HR discussion ? My HR discussion is done 1 week ago and current status is offer approval.

Do any of the top consulting firms have analytics roles (preferably not super technical) that don’t require weekly travel?

What all designations in Cognizant? Could someone please help to understand by mentioning in ascending order?

like

Hi Fishes,

Request your support to like this post, please help me with 11 likes to enable DM.

Thanks

like

Additional Posts in Risk Assurance

Any idea on what I industry senior risk analysts are making?

like

I’m getting put up for manager a year early. I have PPMD ,SM, and M support. Pretty much support from all the key individuals on my team and in my service line. Since it is a year early if i don’t get promoted this round I know it’ll come mid year but I do expect a good salary increase still without the promo. If I don’t get the promo nor a salary increase that I’m okay with, how do I let my partner know that I will begin to entertain outside offers? some of which have offered the manager role.

like

I'm a Tech Risk SC, but have an accounting/finance background. I'm doing the FRM now for broader cert experience, is it worth doing CA long term in my area?

Does anyone have any good resources for auditing ESG?

Identifying a common process, what does this even mean 😩 please help.

like

Be honest, do you see yourself staying in the game to make partner?

likehelpful

Anyone can give insight in B4 Risk in Houston/Dallas market?

like

When is busy season over for the SOX side of stuff? Please tell it doesn’t go past 12/31.

funny

How do you all keep up with trends in risk and internal audit?

like

What’s your worst experience with a senior? (As an associate)

like

Do you audit users with Sudo access and a log of sudo activity or just users with access to sudo?

like

Is anyone here in KPMG’s CRM Risk practice? If so do you know if they are still hiring??

like

What makes more money IT Audit or IT GRC?

like

Currently in Risk Assurance but have the opportunity to transfer into Deals & Strategy. Which one is better for a career long term?

like

If anyone is looking for a referral as an experienced hire to the PwC DAT (Digital Assurance & Transparency - formerly Risk Assurance) practice let me know and would be happy to refer you. We are actively looking to hire.

like

Has an tested roles for SAP through productive test simulation within production? Is there any risk doing this as the test is in production?

like

Mid year promotions, I found out you need to make your own case for it rather than the firm coming to you. If you think you’re ready make sure you speak up!

I have an interview coming up for internal audit manager. Currently in external audit. When asked about my experience in ERM - what would you say Is transferable skills that I can leverage in my answer?

like

What’s the salary range for IT Audit Seniors in the Seattle market?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal