Career Overlap Transition record
RecordMove

Data protection officer to ICT auditor manager

A data protection officer already meets 20% of what the ICT auditor manager role asks for. The move turns on 16 required skills not yet in the profile.

Fig. 1 · Skill transfer ESCO v1.2.1 · directional
From data protection officer
20 % overlap
Distant match
To ICT auditor manager
10 You already bring
16 Still to learn
42 Skills in the target role2
Learning distance A rebuild

80.1/ 100

1 How much of what an ICT auditor manager is expected to do is already part of a data protection officer’s work. Directional: the figure for the reverse move differs, because moving into a speciality is not the same problem as moving out of one. 2 Every skill the ICT auditor manager role is recorded as needing, required and optional together. What these numbers mean.

Why

Why this move works

An ICT auditor manager role treats 3 of its required skills as things a data protection officer already does. You would walk in with these on day one.

  • cyber security
  • ensure compliance with legal requirements
  • identify legal requirements

What stands in the way is 16 required skills the profile does not yet cover. Table 3 groups them; Table 4 says which to take first.

Table 2

Table 2 · What you already bring

Of the 10 skills that carry over, these are the ones fewest other occupations ask for. An ICT auditor manager role needs them, and most people applying for one will not have them already. This is the part of a data protection officer background worth leading with.

Skill the target role also needs Area
  • already held ensure information privacy assisting and caring
  • already held develop information security strategy assisting and caring
  • already held identify legal requirements information skills
  • already held ICT security standards information and communication technologies (icts)
  • already held cyber security services
  • already held ICT security legislation business, administration and law

All 10 carried skills, including the 3 the ICT auditor manager role treats as required.

Table 3

Table 3 · What you may need to learn

The 32 missing skills fall into 8 areas of the ESCO skill hierarchy, numbered in the order worth working in. Areas carrying the most required skills come first, and inside each one the required skills sit above the optional ones. Nothing here is a verdict on you: it is a list of what this particular job asks for that your current one does not.

Skill to pick up Tier
01 information skills 5 required
  • still to learn execute ICT audits required
  • still to learn implement ICT risk management required
  • still to learn monitor technology trends required
  • still to learn perform contract compliance audits required
  • still to learn prepare financial auditing reports required
02 business, administration and law 3 required, 3 supplementary
  • still to learn ICT project management required
  • still to learn audit techniques required
  • still to learn quality standards required
  • optional, not held ICT quality policy optional
  • optional, not held organisational resilience optional
  • optional, not held legal requirements of ICT products optional
03 working with computers 2 required, 2 supplementary
  • still to learn manage IT security compliances required
  • still to learn manage standard enterprise resource planning system required
  • optional, not held manage changes in ICT system optional
  • optional, not held use markup languages optional
04 management skills 2 required
  • still to learn develop ICT workflow required
  • still to learn develop audit plan required
05 information and communication technologies (icts) 1 required, 8 supplementary
  • still to learn attack vectors required
  • optional, not held AJAX optional
  • optional, not held ICT process quality models optional
  • optional, not held JavaScript optional
  • optional, not held PHP optional
  • optional, not held cloud technologies optional
  • optional, not held information structure optional
  • optional, not held web programming optional
  • optional, not held systems development life-cycle optional
06 communication, collaboration and creativity 1 required, 3 supplementary
  • still to learn build business relationships required
  • optional, not held develop ICT test suite optional
  • optional, not held implement corporate governance optional
  • optional, not held coach employees optional

2 further areas in the appendix

Table 4

Table 4 · Where to start

The 3 entries an ICT auditor manager role is least likely to hire without. The ordering is computed from the skill data, not from what pays.

Each entry opens a course search for that skill. Career Overlap earns nothing from these links.

Appendix

Appendix · The rest of the record

All 10 skills that carry over
Skill Type
  • already held cyber security knowledge
  • already held ensure compliance with legal requirements skill
  • already held identify legal requirements skill
  • already held ICT security legislation knowledge
  • already held ICT security standards knowledge
  • already held develop information security strategy skill
  • already held ensure information privacy skill
  • already held implement ICT security policies skill
  • already held information confidentiality knowledge
  • already held train employees skill
The 2 learning areas not shown above
Skill to pick up Tier
07 assisting and caring 1 required
  • still to learn ensure adherence to organisational ICT standards required
08 social sciences, journalism and information 1 required
  • still to learn control objectives for information and related technology required
16 supplementary skills, helpful but not required
Skill to pick up Tier
  • optional, not held AJAX optional
  • optional, not held ICT process quality models optional
  • optional, not held ICT quality policy optional
  • optional, not held JavaScript optional
  • optional, not held PHP optional
  • optional, not held cloud technologies optional
  • optional, not held develop ICT test suite optional
  • optional, not held implement corporate governance optional
  • optional, not held information structure optional
  • optional, not held manage changes in ICT system optional
  • optional, not held organisational resilience optional
  • optional, not held use markup languages optional
  • optional, not held web programming optional
  • optional, not held coach employees optional
  • optional, not held legal requirements of ICT products optional
  • optional, not held systems development life-cycle optional
39 held skills the ICT auditor manager role does not ask for
Skill Type
  • not needed by the target role GDPR knowledge
  • not needed by the target role address identified risks skill
  • not needed by the target role advise on government policy compliance skill
  • not needed by the target role analyse legal enforceability skill
  • not needed by the target role apply information security policies skill
  • not needed by the target role apply system organisational policies skill
  • not needed by the target role assist with litigation matters skill
  • not needed by the target role conduct impact evaluation of ICT processes on business skill
  • not needed by the target role cooperate with colleagues skill
  • not needed by the target role data ethics knowledge
  • not needed by the target role data protection knowledge
  • not needed by the target role define organisational standards skill
  • not needed by the target role develop organisational policies skill
  • not needed by the target role develop training programmes skill
  • not needed by the target role document project progress skill
  • not needed by the target role estimate impact of risks skill
  • not needed by the target role information governance compliance knowledge
  • not needed by the target role information security strategy knowledge
  • not needed by the target role internal auditing knowledge
  • not needed by the target role internal risk management policy knowledge
  • not needed by the target role keep up-to-date with regulations skill
  • not needed by the target role legal case management knowledge
  • not needed by the target role legal research knowledge
  • not needed by the target role legal terminology knowledge
  • not needed by the target role maintain internal communication systems skill
  • not needed by the target role manage data for legal matters skill
  • not needed by the target role manage digital identity skill
  • not needed by the target role manage keys for data protection skill
  • not needed by the target role monitor legislation developments skill
  • not needed by the target role perform data cleansing skill
  • not needed by the target role perform project management skill
  • not needed by the target role protect personal data and privacy skill
  • not needed by the target role provide legal advice skill
  • not needed by the target role respect data protection principles skill
  • not needed by the target role respond to enquiries skill
  • not needed by the target role risk management knowledge
  • not needed by the target role support managers skill
  • not needed by the target role use consulting techniques skill
  • not needed by the target role write work-related reports skill
16 gaps that are knowledge rather than practice

Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.

Skill to pick up Tier
  • still to learn control objectives for information and related technology required
  • still to learn ICT project management required
  • still to learn attack vectors required
  • still to learn audit techniques required
  • still to learn quality standards required
  • optional, not held AJAX optional
  • optional, not held ICT process quality models optional
  • optional, not held ICT quality policy optional
  • optional, not held JavaScript optional
  • optional, not held PHP optional
  • optional, not held cloud technologies optional
  • optional, not held information structure optional
  • optional, not held organisational resilience optional
  • optional, not held web programming optional
  • optional, not held legal requirements of ICT products optional
  • optional, not held systems development life-cycle optional
Index
FAQ

Common questions about this move

Can a data protection officer become an ICT auditor manager?

Yes, and it is a career change move. A data protection officer already covers 20% of what an ICT auditor manager is expected to do: 10 skills carry over, 3 of which the ICT auditor manager role treats as required.

What skills does a data protection officer need to become an ICT auditor manager?

16 required skills are missing, plus 16 optional ones. They fall into 8 areas of the ESCO skill hierarchy, led by information skills. The single most important is control objectives for information and related technology.

How hard is the move from data protection officer to ICT auditor manager?

Its learning distance is 80.1 out of 100, which is the career change band. That accounts for both how much is missing and how specialised those skills are.

Note

How this record was compiled

Both occupations are taken from ESCO, which lists the skills and knowledge each occupation is expected to have and marks every one required or optional. Nothing here is a prediction about hiring, and nothing here knows that a particular employer wants a particular certificate. Treat Table 3 as a starting point for your own research rather than a syllabus. The full method states what these figures can and cannot tell you.