IT audit is the practice of collecting and evaluating evidence of an organization’s information systems, practices, and operations. An IT Auditor is a person who has detailed knowledge regarding information systems with a general understanding of accounting principles. He or she uses an audit program to guide their review of fundamental business processes such as a general ledger, accounts receivable, accounts payable, income, and expenses.
IT Auditor is one of the fastest growing career areas in IT industry. Some of the important questions which are frequently asked to an IT Auditor in interviews are as under:
1. What do you mean by audit? Please state some differences between internal audit and external audit?
Audit is an evaluation of a person, organization, system, process, enterprise, project or product. It is an independent examination of financial information of any activity. The internal audit is made to help management whereas external audit is made to help stakeholders. In internal audit the weakness of management is disclosed but in external audit the weakness of management is not disclosed. Internal audit is part of internal control but external audit is not a part of internal control. An internal auditor is an employee of the company whereas external auditor
is not an employee of the company.
2. What is the importance of IT audit to an organization?
IT audit provides a variety of useful information to an organization, but most importantly they remove the risk associated with unknowns within an IT environment. It helps in keeping track of where the money is going and makes sure that the money is going where it is supposed to and not in someone’s pocket.
3. Please elaborate some of your skills and abilities.
I have an extensive experience of ten years in this field. I have broad background in all stages of audit including planning, evaluation and testing. I also have deep knowledge of hardware, software, networking, business process and Sarbanes-Oxley Act (SOX).
4. Tell us some tasks and duties that you had performed in your previous job?
Well, in my previous job, I use to perform SAP and legacy system reviews, and check whether audit programs have been completed or not. I also assisted external auditors during SOX IT testing. I also conducted reviews of data centers, extranets, telecommunications, and intranets to assess controls and ensure availability, accuracy, and security under all conditions.
Well, these are some of the frequently asked interview questions. Do not forget to say “thank you” to the person or people who interviewed you.
