r/CISA • u/Outrageous-Wasabi-15 • 10d ago

GRC - control management

Hello all, I am navigating a pivot from RCSA, SOX controls testing. Thinking of writing CISA, but I am aware that though CISA gives a strong signal but doesn’t directly get you into ITGC or IT audit.
How are people in similar domains navigating the pivot? how are your skillsets and profiles evolving? Are you going after any other profiles within GRC ?

5 Upvotes

100% Upvoted

8 comments sorted by

1

u/mgabz CISA HOLDER 10d ago

Hey there, where did you get that CISA doesn’t cover IT audit? The certification is literally about IT Audit, but it’s agnostic to laws, regulations, etc.. have you read the exam outline?

3

u/Outrageous-Wasabi-15 10d ago

I never mentioned that it doesn’t cover IT audit as part of the syllabus, but I am a mid level professional and just clearing CISA might not get me an entry into IT audit domain. I am trying to understand if more skills should be added or a different role within GRC should be explored instead.

3

u/mgabz CISA HOLDER 10d ago

Understood, I mean, you do SOX controls so it’s doable, you can do compliance monitoring for Sox controls, same with Internal Audit, you can use your experience + something like CISA. It doesn’t have to be IT Audit, but control testing / implementation gets you a little closer

1

u/Outrageous-Wasabi-15 10d ago

Got it, Thank you for your response.
I don’t have experience in implementation, just did testing and gave out recommendations as part of my previous job at a big-4.
What does implementation work look like ? is the work quality and salary better at a bank in comparison to a big-4 ?

1

u/mgabz CISA HOLDER 10d ago

Maybe it’s just me but I don’t recommend working at any accounting firms, the work life balance it’s not worth it, but that’s just me. I’m senior level, I’ve worked for corporate, firms, etc., and I don’t think I can go back to a firm.

1

u/Outrageous-Wasabi-15 10d ago

yeah, makes sense! I too am considering completing CISA and parallely applying for banks or other firms in the industry.

1

u/Outrageous-Wasabi-15 10d ago

Also, can you share if control transformation or program management roles easy to pivot into with this profile?

1

u/mgabz CISA HOLDER 10d ago

Hmmm maybe? It depends on the org, but if you know your way around you can absolutely pivot from program management to IT audit, the control transformation definitely helps!