The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Systems Auditor (Internal Progression)
2-3 yearsSkills to master
- Independently executing audit tests, taking ownership of specific audit areas, identifying initial findings, and beginning to mentor new joiners.
You're ready to move on when
- Consistently delivers high-quality workpapers with minimal review notes.
- Successfully leads walkthroughs and engages with process owners.
- Proactively identifies control weaknesses and proposes solutions.
- Demonstrates strong understanding of core ITGCs and audit methodologies.
- 2
Big 4 IT Audit Senior Associate
5-7 yearsSkills to master
- Managing multiple client engagements, leading small teams, drafting client reports, and navigating complex client environments.
You're ready to move on when
- Strong client relationship management skills.
- Experience across diverse industries and technologies.
- Proven ability to manage project timelines and budgets.
- Holds a CISA or equivalent professional qualification.
- 3
IT Risk & Compliance Analyst
4-6 yearsSkills to master
- Understanding risk frameworks, designing controls, monitoring compliance, and managing regulatory requirements.
You're ready to move on when
- Deep knowledge of specific regulatory requirements (e.g., GDPR, SOX).
- Experience implementing and monitoring IT controls.
- Strong understanding of risk assessment methodologies.
- Ability to translate regulatory requirements into practical IT actions.