ICT product manager to IT auditor
An ICT product manager already meets 26% of what the IT auditor role asks for. The move turns on 13 required skills not yet in the profile.
73.7/ 100
1 How much of what an IT auditor is expected to do is already part of an ICT product manager’s work. Directional: the figure for the reverse move differs, because moving into a speciality is not the same problem as moving out of one. 2 Every skill the IT auditor role is recorded as needing, required and optional together. What these numbers mean.
Why this move works
An IT auditor role treats 6 of its required skills as things an ICT product manager already does. You would walk in with these on day one.
- ICT process quality models
- ICT quality policy
- ICT security legislation
- engineering processes
- quality standards
- systems development life-cycle
What stands in the way is 13 required skills the profile does not yet cover. Table 3 groups them; Table 4 says which to take first.
Table 2 · What you already bring
Of the 8 skills that carry over, these are the ones fewest other occupations ask for. An IT auditor role needs them, and most people applying for one will not have them already. This is the part of an ICT product manager background worth leading with.
- already held ICT quality policy business, administration and law
- already held ICT project management business, administration and law
- already held ICT process quality models information and communication technologies (icts)
- already held monitor technology trends information skills
- already held ICT security legislation business, administration and law
- already held systems development life-cycle information and communication technologies (icts)
All 8 carried skills, including the 6 the IT auditor role treats as required.
Table 3 · What you may need to learn
The 29 missing skills fall into 8 areas of the ESCO skill hierarchy, numbered in the order worth working in. Areas carrying the most required skills come first, and inside each one the required skills sit above the optional ones. Nothing here is a verdict on you: it is a list of what this particular job asks for that your current one does not.
- still to learn organisational resilience required
- still to learn product life-cycle required
- still to learn audit techniques required
- still to learn legal requirements of ICT products required
- still to learn develop audit plan required
- still to learn improve business processes required
- still to learn perform quality audits required
- optional, not held develop ICT workflow optional
- optional, not held define organisational standards optional
- still to learn execute ICT audits required
- still to learn prepare financial auditing reports required
- optional, not held identify ICT security risks optional
- optional, not held identify legal requirements optional
- still to learn analyse ICT system required
- still to learn perform ICT security testing required
- optional, not held manage IT security compliances optional
- still to learn ICT security standards required
- optional, not held ICT accessibility standards optional
- optional, not held ICT network security risks optional
- optional, not held cloud technologies optional
- optional, not held information security strategy optional
- optional, not held World Wide Web Consortium standards optional
- still to learn ensure adherence to organisational ICT standards required
- optional, not held apply information security policies optional
- optional, not held protect personal data and privacy optional
2 further areas in the appendix
Table 4 · Where to start
The 3 entries an IT auditor role is least likely to hire without. The ordering is computed from the skill data, not from what pays.
- 01 ICT security standards study this
- 02 analyse ICT system practise this
- 03 ensure adherence to organisational ICT standards practise this
Each entry opens a course search for that skill. Career Overlap earns nothing from these links.
Appendix · The rest of the record
All 8 skills that carry over
- already held ICT process quality models knowledge
- already held ICT quality policy knowledge
- already held ICT security legislation knowledge
- already held engineering processes knowledge
- already held quality standards knowledge
- already held systems development life-cycle knowledge
- already held ICT project management knowledge
- already held monitor technology trends skill
The 2 learning areas not shown above
- optional, not held communicate analytical insights optional
- optional, not held develop documentation in accordance with legal requirements optional
- optional, not held inform on workplace safety standards optional
- optional, not held cyber security optional
16 supplementary skills, helpful but not required
- optional, not held ICT accessibility standards optional
- optional, not held ICT network security risks optional
- optional, not held apply information security policies optional
- optional, not held cloud technologies optional
- optional, not held communicate analytical insights optional
- optional, not held cyber security optional
- optional, not held develop ICT workflow optional
- optional, not held identify ICT security risks optional
- optional, not held information security strategy optional
- optional, not held manage IT security compliances optional
- optional, not held World Wide Web Consortium standards optional
- optional, not held define organisational standards optional
- optional, not held develop documentation in accordance with legal requirements optional
- optional, not held identify legal requirements optional
- optional, not held inform on workplace safety standards optional
- optional, not held protect personal data and privacy optional
42 held skills the IT auditor role does not ask for
- not needed by the target role Agile development knowledge
- not needed by the target role DevOps knowledge
- not needed by the target role ICT hardware specifications knowledge
- not needed by the target role ICT infrastructure knowledge
- not needed by the target role ICT market knowledge
- not needed by the target role ICT sales methodologies knowledge
- not needed by the target role ICT software specifications knowledge
- not needed by the target role ICT system user requirements knowledge
- not needed by the target role Open source model knowledge
- not needed by the target role Outsourcing model knowledge
- not needed by the target role Prototyping development knowledge
- not needed by the target role Rapid application development knowledge
- not needed by the target role Spiral development knowledge
- not needed by the target role Waterfall development knowledge
- not needed by the target role advertising techniques knowledge
- not needed by the target role assess ICT knowledge skill
- not needed by the target role business process modelling knowledge
- not needed by the target role conduct impact evaluation of ICT processes on business skill
- not needed by the target role cost management knowledge
- not needed by the target role create project specifications skill
- not needed by the target role define technical requirements skill
- not needed by the target role define technology strategy skill
- not needed by the target role digital systems knowledge
- not needed by the target role hybrid model knowledge
- not needed by the target role incremental development knowledge
- not needed by the target role innovation processes knowledge
- not needed by the target role interact with users to gather requirements skill
- not needed by the target role iterative development knowledge
- not needed by the target role manage budgets skill
- not needed by the target role manage contracts skill
- not needed by the target role manage localisation skill
- not needed by the target role manage schedule of tasks skill
- not needed by the target role perform market research skill
- not needed by the target role perform online data analysis skill
- not needed by the target role perform product planning skill
- not needed by the target role perform risk analysis skill
- not needed by the target role plan product management skill
- not needed by the target role product comprehension knowledge
- not needed by the target role provide cost benefit analysis reports skill
- not needed by the target role service-oriented modelling knowledge
2 further entries not listed here
11 gaps that are knowledge rather than practice
Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.
- still to learn ICT security standards required
- still to learn organisational resilience required
- still to learn product life-cycle required
- still to learn audit techniques required
- still to learn legal requirements of ICT products required
- optional, not held ICT accessibility standards optional
- optional, not held ICT network security risks optional
- optional, not held cloud technologies optional
- optional, not held cyber security optional
- optional, not held information security strategy optional
- optional, not held World Wide Web Consortium standards optional
Common questions about this move
Can an ICT product manager become an IT auditor?
Yes, and it is a substantial move. An ICT product manager already covers 26% of what an IT auditor is expected to do: 8 skills carry over, 6 of which the IT auditor role treats as required.
What skills does an ICT product manager need to become an IT auditor?
13 required skills are missing, plus 16 optional ones. They fall into 8 areas of the ESCO skill hierarchy, led by business, administration and law. The single most important is ICT security standards.
How hard is the move from ICT product manager to IT auditor?
Its learning distance is 73.7 out of 100, which is the substantial band. That accounts for both how much is missing and how specialised those skills are.
How this record was compiled
Both occupations are taken from ESCO, which lists the skills and knowledge each occupation is expected to have and marks every one required or optional. Nothing here is a prediction about hiring, and nothing here knows that a particular employer wants a particular certificate. Treat Table 3 as a starting point for your own research rather than a syllabus. The full method states what these figures can and cannot tell you.