Director of compliance and information security to ICT auditor manager
A director of compliance and information security already meets 19% of what the ICT auditor manager role asks for. The move turns on 15 required skills not yet in the profile.
81/ 100
1 How much of what an ICT auditor manager is expected to do is already part of a director of compliance and information security’s work. Directional: the figure for the reverse move differs, because moving into a speciality is not the same problem as moving out of one. 2 Every skill the ICT auditor manager role is recorded as needing, required and optional together. What these numbers mean.
Why this move works
An ICT auditor manager role treats 4 of its required skills as things a director of compliance and information security already does. You would walk in with these on day one.
- cyber security
- ensure compliance with legal requirements
- implement ICT risk management
- manage IT security compliances
What stands in the way is 15 required skills the profile does not yet cover. Table 3 groups them; Table 4 says which to take first.
Table 2 · What you already bring
Of the 7 skills that carry over, these are the ones fewest other occupations ask for. An ICT auditor manager role needs them, and most people applying for one will not have them already. This is the part of a director of compliance and information security background worth leading with.
- already held manage IT security compliances working with computers
- already held implement ICT risk management information skills
- already held ICT security standards information and communication technologies (icts)
- already held cyber security services
- already held ICT security legislation business, administration and law
- already held implement ICT security policies working with computers
All 7 carried skills, including the 4 the ICT auditor manager role treats as required.
Table 3 · What you may need to learn
The 35 missing skills fall into 8 areas of the ESCO skill hierarchy, numbered in the order worth working in. Areas carrying the most required skills come first, and inside each one the required skills sit above the optional ones. Nothing here is a verdict on you: it is a list of what this particular job asks for that your current one does not.
- still to learn execute ICT audits required
- still to learn identify legal requirements required
- still to learn monitor technology trends required
- still to learn perform contract compliance audits required
- still to learn prepare financial auditing reports required
- still to learn ICT project management required
- still to learn audit techniques required
- still to learn quality standards required
- optional, not held ICT quality policy optional
- optional, not held organisational resilience optional
- optional, not held legal requirements of ICT products optional
- still to learn develop ICT workflow required
- still to learn develop audit plan required
- still to learn attack vectors required
- optional, not held AJAX optional
- optional, not held ICT process quality models optional
- optional, not held JavaScript optional
- optional, not held PHP optional
- optional, not held cloud technologies optional
- optional, not held information confidentiality optional
- optional, not held information structure optional
- optional, not held web programming optional
- optional, not held systems development life-cycle optional
- still to learn build business relationships required
- optional, not held develop ICT test suite optional
- optional, not held implement corporate governance optional
- optional, not held coach employees optional
- optional, not held train employees optional
- still to learn ensure adherence to organisational ICT standards required
- optional, not held develop information security strategy optional
- optional, not held ensure information privacy optional
2 further areas in the appendix
Table 4 · Where to start
The 3 entries an ICT auditor manager role is least likely to hire without. The ordering is computed from the skill data, not from what pays.
- 01 control objectives for information and related technology study this
- 02 ICT project management study this
- 03 attack vectors study this
Each entry opens a course search for that skill. Career Overlap earns nothing from these links.
Appendix · The rest of the record
All 7 skills that carry over
- already held cyber security knowledge
- already held ensure compliance with legal requirements skill
- already held implement ICT risk management skill
- already held manage IT security compliances skill
- already held ICT security legislation knowledge
- already held ICT security standards knowledge
- already held implement ICT security policies skill
The 2 learning areas not shown above
- still to learn manage standard enterprise resource planning system required
- optional, not held manage changes in ICT system optional
- optional, not held use markup languages optional
- still to learn control objectives for information and related technology required
20 supplementary skills, helpful but not required
- optional, not held AJAX optional
- optional, not held ICT process quality models optional
- optional, not held ICT quality policy optional
- optional, not held JavaScript optional
- optional, not held PHP optional
- optional, not held cloud technologies optional
- optional, not held develop ICT test suite optional
- optional, not held develop information security strategy optional
- optional, not held ensure information privacy optional
- optional, not held implement corporate governance optional
- optional, not held information confidentiality optional
- optional, not held information structure optional
- optional, not held manage changes in ICT system optional
- optional, not held organisational resilience optional
- optional, not held use markup languages optional
- optional, not held web programming optional
- optional, not held coach employees optional
- optional, not held legal requirements of ICT products optional
- optional, not held systems development life-cycle optional
- optional, not held train employees optional
5 held skills the ICT auditor manager role does not ask for
- not needed by the target role cooperate with colleagues skill
- not needed by the target role ensure compliance with policies skill
- not needed by the target role information security strategy knowledge
- not needed by the target role keep up-to-date with regulations skill
- not needed by the target role lead a team skill
17 gaps that are knowledge rather than practice
Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.
- still to learn control objectives for information and related technology required
- still to learn ICT project management required
- still to learn attack vectors required
- still to learn audit techniques required
- still to learn quality standards required
- optional, not held AJAX optional
- optional, not held ICT process quality models optional
- optional, not held ICT quality policy optional
- optional, not held JavaScript optional
- optional, not held PHP optional
- optional, not held cloud technologies optional
- optional, not held information confidentiality optional
- optional, not held information structure optional
- optional, not held organisational resilience optional
- optional, not held web programming optional
- optional, not held legal requirements of ICT products optional
- optional, not held systems development life-cycle optional
Other moves recorded from director of compliance and information security
- director of compliance and information security in gambling 21% covered · substantial
- data protection officer 21% covered · career change
Full index of moves from director of compliance and information security
Common questions about this move
Can a director of compliance and information security become an ICT auditor manager?
Yes, and it is a career change move. A director of compliance and information security already covers 19% of what an ICT auditor manager is expected to do: 7 skills carry over, 4 of which the ICT auditor manager role treats as required.
What skills does a director of compliance and information security need to become an ICT auditor manager?
15 required skills are missing, plus 20 optional ones. They fall into 8 areas of the ESCO skill hierarchy, led by information skills. The single most important is control objectives for information and related technology.
How hard is the move from director of compliance and information security to ICT auditor manager?
Its learning distance is 81 out of 100, which is the career change band. That accounts for both how much is missing and how specialised those skills are.
How this record was compiled
Both occupations are taken from ESCO, which lists the skills and knowledge each occupation is expected to have and marks every one required or optional. Nothing here is a prediction about hiring, and nothing here knows that a particular employer wants a particular certificate. Treat Table 3 as a starting point for your own research rather than a syllabus. The full method states what these figures can and cannot tell you.