Chief ICT security officer to ICT auditor manager
A chief ICT security officer already meets 59% of what the ICT auditor manager role asks for. The move turns on 7 required skills not yet in the profile.
46.5/ 100
1 How much of what an ICT auditor manager is expected to do is already part of a chief ICT security officer’s work. Directional: the figure for the reverse move differs, because moving into a speciality is not the same problem as moving out of one. 2 Every skill the ICT auditor manager role is recorded as needing, required and optional together. What these numbers mean.
Why this move works
An ICT auditor manager role treats 12 of its required skills as things a chief ICT security officer already does. You would walk in with these on day one.
- ICT project management
- attack vectors
- audit techniques
- control objectives for information and related technology
- cyber security
- ensure adherence to organisational ICT standards
What stands in the way is 7 required skills the profile does not yet cover. Table 3 groups them; Table 4 says which to take first.
Table 2 · What you already bring
Of the 23 skills that carry over, these are the ones fewest other occupations ask for. An ICT auditor manager role needs them, and most people applying for one will not have them already. This is the part of a chief ICT security officer background worth leading with.
- already held control objectives for information and related technology social sciences, journalism and information
- already held ensure information privacy assisting and caring
- already held ensure adherence to organisational ICT standards assisting and caring
- already held develop information security strategy assisting and caring
- already held implement corporate governance communication, collaboration and creativity
- already held identify legal requirements information skills
All 23 carried skills, including the 12 the ICT auditor manager role treats as required.
Table 3 · What you may need to learn
The 19 missing skills fall into 6 areas of the ESCO skill hierarchy, numbered in the order worth working in. Areas carrying the most required skills come first, and inside each one the required skills sit above the optional ones. Nothing here is a verdict on you: it is a list of what this particular job asks for that your current one does not.
- still to learn perform contract compliance audits required
- still to learn prepare financial auditing reports required
- still to learn develop ICT workflow required
- still to learn develop audit plan required
- still to learn quality standards required
- optional, not held ICT quality policy optional
- optional, not held legal requirements of ICT products optional
- still to learn build business relationships required
- optional, not held develop ICT test suite optional
- optional, not held coach employees optional
- still to learn manage standard enterprise resource planning system required
- optional, not held manage changes in ICT system optional
- optional, not held use markup languages optional
- optional, not held AJAX optional
- optional, not held JavaScript optional
- optional, not held PHP optional
- optional, not held information structure optional
- optional, not held web programming optional
- optional, not held systems development life-cycle optional
Table 4 · Where to start
The 3 entries an ICT auditor manager role is least likely to hire without. The ordering is computed from the skill data, not from what pays.
- 01 develop ICT workflow practise this
- 02 manage standard enterprise resource planning system practise this
- 03 build business relationships practise this
Each entry opens a course search for that skill. Career Overlap earns nothing from these links.
Appendix · The rest of the record
All 23 skills that carry over
- already held ICT project management knowledge
- already held attack vectors knowledge
- already held audit techniques knowledge
- already held control objectives for information and related technology knowledge
- already held cyber security knowledge
- already held ensure adherence to organisational ICT standards skill
- already held ensure compliance with legal requirements skill
- already held execute ICT audits skill
- already held identify legal requirements skill
- already held implement ICT risk management skill
- already held manage IT security compliances skill
- already held monitor technology trends skill
- already held ICT process quality models knowledge
- already held ICT security legislation knowledge
- already held ICT security standards knowledge
- already held cloud technologies knowledge
- already held develop information security strategy skill
- already held ensure information privacy skill
- already held implement ICT security policies skill
- already held implement corporate governance skill
- already held information confidentiality knowledge
- already held organisational resilience knowledge
- already held train employees skill
12 supplementary skills, helpful but not required
- optional, not held AJAX optional
- optional, not held ICT quality policy optional
- optional, not held JavaScript optional
- optional, not held PHP optional
- optional, not held develop ICT test suite optional
- optional, not held information structure optional
- optional, not held manage changes in ICT system optional
- optional, not held use markup languages optional
- optional, not held web programming optional
- optional, not held coach employees optional
- optional, not held legal requirements of ICT products optional
- optional, not held systems development life-cycle optional
58 held skills the ICT auditor manager role does not ask for
- not needed by the target role ICT communications protocols knowledge
- not needed by the target role ICT encryption knowledge
- not needed by the target role ICT infrastructure knowledge
- not needed by the target role ICT network security risks knowledge
- not needed by the target role ICT project management methodologies knowledge
- not needed by the target role ICT recovery techniques knowledge
- not needed by the target role ICT safety skill
- not needed by the target role ICT system user requirements knowledge
- not needed by the target role Internet of Things knowledge
- not needed by the target role World Wide Web Consortium standards knowledge
- not needed by the target role advice on security risk management skill
- not needed by the target role apply operations for an ITIL-based environment skill
- not needed by the target role assess ICT knowledge skill
- not needed by the target role assessment of risks and threats knowledge
- not needed by the target role cloud monitoring and reporting knowledge
- not needed by the target role cloud security and compliance knowledge
- not needed by the target role communicate with stakeholders skill
- not needed by the target role comply with legal regulations skill
- not needed by the target role computer forensics knowledge
- not needed by the target role computer programming knowledge
- not needed by the target role conduct impact evaluation of ICT processes on business skill
- not needed by the target role coordinate technological activities skill
- not needed by the target role create solutions to problems skill
- not needed by the target role cyber attack counter-measures knowledge
- not needed by the target role data protection knowledge
- not needed by the target role decision support systems knowledge
- not needed by the target role educate on data confidentiality skill
- not needed by the target role engage with stakeholders skill
- not needed by the target role ensure cross-department cooperation skill
- not needed by the target role establish an ICT security prevention plan skill
- not needed by the target role establish an Information Security Management System skill
- not needed by the target role ethical hacking principles knowledge
- not needed by the target role ethics knowledge
- not needed by the target role forecast organisational risks skill
- not needed by the target role identify ICT security risks skill
- not needed by the target role implement a firewall skill
- not needed by the target role implement a virtual private network skill
- not needed by the target role implement anti-virus software skill
- not needed by the target role implement cloud security and compliance skill
- not needed by the target role information security strategy knowledge
18 further entries not listed here
9 gaps that are knowledge rather than practice
Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.
- still to learn quality standards required
- optional, not held AJAX optional
- optional, not held ICT quality policy optional
- optional, not held JavaScript optional
- optional, not held PHP optional
- optional, not held information structure optional
- optional, not held web programming optional
- optional, not held legal requirements of ICT products optional
- optional, not held systems development life-cycle optional
Other moves recorded from chief ICT security officer
Common questions about this move
Can a chief ICT security officer become an ICT auditor manager?
Yes, and it is a moderate move. A chief ICT security officer already covers 59% of what an ICT auditor manager is expected to do: 23 skills carry over, 12 of which the ICT auditor manager role treats as required.
What skills does a chief ICT security officer need to become an ICT auditor manager?
7 required skills are missing, plus 12 optional ones. They fall into 6 areas of the ESCO skill hierarchy, led by information skills. The single most important is develop ICT workflow.
How hard is the move from chief ICT security officer to ICT auditor manager?
Its learning distance is 46.5 out of 100, which is the moderate band. That accounts for both how much is missing and how specialised those skills are.
How this record was compiled
Both occupations are taken from ESCO, which lists the skills and knowledge each occupation is expected to have and marks every one required or optional. Nothing here is a prediction about hiring, and nothing here knows that a particular employer wants a particular certificate. Treat Table 3 as a starting point for your own research rather than a syllabus. The full method states what these figures can and cannot tell you.