Professional Documents
Culture Documents
Internal Audit
Career Potential
The IIAs 2016 Career Guide
Rise to Your
Internal Audit
Career Potential
The recognition of internal audits value continues to increase, as evidenced by findings in
The IIAs Audit Executive Centers 2015 North American Pulse of Internal Audit Report:
Navigating an Increasingly Volatile Risk Environment (2015 Pulse Report). Forty-two percent of survey respondents expected their budgets to increase in 2015 and 29 percent
projected staff level increases. In fact, 29 percent said they anticipated their budgets to
increase by 15 percent or more.
Whether you pursue a lifelong internal audit career or spend limited time
in the profession to strengthen key skill sets, IIA President and CEO
Richard Chambers, CIA, QIAL, CGAP, CCSA, CRMA, says your time will
be well spent. According to Chambers, Internal auditing has become
one of the few professions with skill sets that are so transferrable to other
business units within the organization that you can wait to decide your
path until after you have some experience.
With unemployment levels for the profession less than half the national
average, it is a good time to be an internal auditor. However, as with
any profession, internal audit faces its challenges. 2015 Pulse Report
highlights both opportunities and challenges within the profession and
is intended to help practitioners use this information to best position
themselves for career success.
TALENT DEMANDS
2022 1,442,200 Accountants & Auditors
2012
{13%}
Increase
4 out of 10 internal
auditors receive less
than 40 hours of
training per year.
According the 2015
Chambers also highlighted that for the first time in more than a decade, there is mounting
evidence of an emerging internal audit talent shortage. Compounded by the talent shortage is a growing skill gap. When asked to describe why they were experiencing skill gaps,
of respondents to The IIAs Audit Executive Centers 2014 Pulse of the Profession survey:
33% mentioned changes in the field making it difficult for auditors to stay current.
The question is, how do you become or continue to be the in-demand modern day internal
auditor? According to Larry Harrington, CIA, QIAL, CRMA, CPA, The IIAs 201516
global chairman of the board and vice president of internal audit for Raytheon Co. in Waltham,
Mass, Whether their organizations provide the resources or time to do so, internal auditors
must be willing to invest their own time and money to achieve that goal.
The importance of his chairmans theme, Invest in Yourself, hits home when Harrington
points out that globally, six in 10 audit departments training and development programs
are poorly implemented. The 2015 Global Internal Audit Common Body of Knowledge Study
Forty hours of
development per
year is okay if you
are comfortable with
mediocrity, but to be
successful, you have to
put in the extra time.
Theresa Grafenstine, inspector general,
U.S. House of Representatives
39%
12
6
Less than 40 hours
28%
6
Exactly 40 hours
12
33%
6
Exceeds 40 hours
Smart Investing
While its clear the time practitioners need to invest in professional training and development needs to increase exponentially, the question becomes where to invest that time?
To answer the question, practitioners need to understand stakeholders needs so they can
attain or sharpen the skills necessary to meet those needs. According to KMPG Internationals Global Audit Committee Survey, 2014, the top areas that stakeholders would like
internal audit to devote more time to are risk management processes (62 percent), IT and
data management (58 percent), operational risks (52 percent), and compliance and regulation (45 percent).
45%
52%
Compliance &
Regulation
58%
Operational Risks
62%
IT & Data
Management
Risk Management
Processes
Respondents to the survey acknowledged the evolution of internal audit, with more than 80
percent indicating that internal audits role should extend beyond the adequacy of financial
reporting and controls to include key risks, especially escalating threats such as IT and data
management. However, only 50 percent of respondents indicated their internal audit team
currently has the skills and resources to be effective in this role.
Chief audit executives (CAEs) are working diligently to ensure they are staffing and developing their teams to meet the challenge. But the top five areas where they have faced hiring
challenges and identified gaps in their current teams skill levels, according to the 2015
Pulse Report, include:
AREAS OF HIRING DIFFICULTY
RANK
SKILL
ITGeneral
Industry-specific Knowledge
Analytical/Critical Thinking
AREAS OF SKILL DEFICIENCIES
RANK
SKILL
ITGeneral
Business Acumen
Analytical/Critical
Thinking
Communication
Skills
Industry Specific
Knowledge
To help internal auditors strengthen these highly sought after skills, and attain a big picture
view of their current skills levels in all areas, The IIA has created a free tool for its members,
IIA Career Map. This online application allows practitioners to self-assess their skills
against a global internal audit competency framework created by The IIA that is tied to various internal audit positions. After the self-assessment is complete, IIA Career Map creates a
gap analysis and a personalized learning plan to help users get to the next level.
96
Business Acumen
Analytical/Critical
Thinking
Communication
Skills
The ability to break down information, evaluate it, and understand how one component affects another is invaluable. Combine that skill with the ability to examine assumptions, discern hidden values, evaluate evidence, and draw conclusions and it creates a powerful force
that provides a framework for solutions. It explains why analytical and critical thinking was
the top-ranked skill CAEs valued. These skills were considered to be extremely essential by
more than 62 percent of 2015 Pulse Report respondents, with another 34 percent considering them to be very essential meaning 96 percent of CAEs highly value this expertise.
These skills roll up into the bigger picture of the role internal audit can ultimately play
within the organization. As board and audit committee member, Marty Coyne, stated in the
Audit Channel TV video As Audit Evolves, So Must We, Looking out three to five years, internal audit will start to begin to be able to say based on the following, here are the things
that we need to be thinking about. So from an audit committee standpoint, they help frame
some of the agendas. And from an external audit standpoint, I actually think theyll have
a significant impact on the external auditors what they are actually auditing, what the
subject matter is, and what the scope of the audit is.
Through tapping into the power of the IIA Career Map tool, users can see what analytical
and critical thinking course work is appropriate to pursue based on current skill levels. Some
options include:
Communication
TOP SKILLS SOUGHT
AFTER FOR NEW
INTERNAL AUDITORS
96%
Business Acumen
Communication
Skills
Industry Specific
Knowledge
Nothing gets done without communication, which is why it was ranked so highly by CAEs,
with 56 percent of 2015 Pulse Report respondents describing it as extremely essential and
another 40 percent considering it very essential (96 percent combined). CAEs are looking
for practitioners who can not only analyze information, but develop clear messages to communicate their findings. Internal audit functions must have the skills to provide the level
of detail stakeholders need to make informed decisions, without bogging them down in irrelevant minutiae, resulting in:
It is a skill that comes into play frequently, with more than seven in 10 respondents citing that they periodically interview management to identify
changes in the organizations risk profile, with 38 percent describing their
Communication skills use as very utilized and 33 percent as extensively
utilized.
To enhance communications skills, internal auditors should pursue professional development opportunities such as The IIAs courses Communication Skills for Auditors and Audit Report Writing. These skills are
vital for both gathering and delivering information. As Kwang Ho Sung,
vice president and head of internal audit at a major South Korean bank,
emphasized in a report issued from the 2015 CBOK Study, Driving Success in a Changing World, Excellent communication skills and business
knowledge are critical to internal auditors. If we find a potential control
breakdown in a high-risk area, we need to be able to easily and accurately
explain that to our clients in a way they understand.
Business Acumen
Business Acumen
Analytical/Critical
Thinking
Communication
Skills
80%
of
CAEs Highly Value
Industry Specific
Knowledge
This Expertise
According to PwCs 2015 State of the Internal Audit Profession Report, the absence of
strong business acumen skills within internal audit significantly hinders its ability to add
value. In fact, among stakeholders who find little value in their internal audit functions,
70 percent say business acumen is one of the primary road blocks. It explains why business acumen skills garnered the number three spot in the 2015 Pulse Reports list of most
recruited skills. These skills were considered extremely essential by 30 percent of respondents and very essential by more than 50 percent (80 percent combined).
If internal audit is to successfully shift focus from primarily financial-related topics and
offer proactive insights on all business risks, business acumen skills are critical. As Abdulrahman al Harthy, chief audit executive, Oman Oil Group, explains in PwCs report, The
main area of challenge is not technical but behavioral: finding auditors with sufficient global
and business acumen who can face management and provide appropriate and constructive
levels of challenge.
However, the same report offered a cautionary and challenging comment by Ninette Caruso, chief audit executive, Genworth Financial. If internal audit says it is going to learn
business acumen, it will fail, says Caruso. Internal audit needs people who will train
themselves by digging into the details, and that starts with intellectual curiosity. Intellectual
curiosity is key.
This speaks to Harringtons assertion that practitioners must take personal responsibility for
their professional development. Combining the drive it takes to train themselves by digging
into the details with courses that can offer direction on business acumen, such as The IIAs
courses Creative Problem Solving Techniques for Internal Auditors and Essential Skills for
Todays Internal Auditor, as well as those suggested through IIA Career Map, can prove to
be an effective formula.
Industry-Specific Knowledge
69%
Business Acumen
of CAEs
Highly
Value
Analytical/Critical
ThisThinking
Expertise
Communication
Skills
Industry Specific
Knowledge
According to the The IIAs Global Internal Audit Common Body of Knowledge (CBOK) Study,
Driving Success in a Changing World: 10 Imperatives for Internal Audit, only 53 percent of
respondents incorporate training for internal audit that addresses business knowledge related to the industry and organization. However, a total of 69 percent of respondents to the
2015 Pulse Report considered industry-specific knowledge, the fourth-ranked category, to
be either very or extremely essential (46 percent and 23 percent respectively).
While there are core competencies that all internal auditors should possess, applying those
skill sets to the health care industry and the fashion industry are two vastly different endeavors. To be taken seriously and have both their skills and insights valued within the organization, internal auditors must understand the driving factors, nuances, and unique challenges
of the specific industry in which they operate.
However, even within a given industry, any given sector of that
industry can demand different skills sets and industry knowledge. For instance, Barclay Simpsons Compensation and Market
Trends 2015, Internal Audit Report stated Investment banks
have sought candidates with good capital markets products exposure or experience of auditing front-office trading desks; while
consumer banks have seen demand rise for candidates with
strong model risk, treasury and liquidity understanding as they
respond to CCAR/DFAST regulations.
10
MY DEVELOPMENT PLAN
CEO
Titles I would
like to hold.
Areas of expertise
I want to
explore.
Industries/ types
of organizations
I might excel in.
Would I consider
relocating
for a job?
What are my
salary and benefit
expectations?
31%
33%
76%
placed the responsibility for providing a clear career development path on their employer.
11
With those numbers, simply taking personal responsibility for developing your career path will give you an edge on the competition. The good
news is, gone are the days where this has to be a manual process. Using free, online tools such as IIA Career Map can do the gap analysis
and course planning portion for you. All that is left is for you to follow
through on the training, update your personalized learning plan, and
continuing to pursue your independent learning.
76 percent place
the responsibility for
providing a clear career
development path on
their employer.
Source: July 2015 article, Skills Gap,
Turn Over Are Top Talent Concerns, published by The Society of Human Resource
Management (SHRM)
This can become an overwhelming task if you do not keep on top of it.
As time passes, it is harder to recall specific project details. Build it
into your regular routine by putting a weekly reminder on your calendar
to jot down three specific and tangible things you accomplished during
the week. Keeping an accurate and comprehensive log of your accomplishments positions
you to:
How many people do you think are in your network? A June 2015 article in CareerCast,
The Underestimated Importance of Personal Networking, cited that according to the Pew
12
Research Center, the average American has approximately 634 contacts. Additionally, the
August 2014 article, Professional Social Networks: Whats Average, and How Can You Increase Yours?, published by Keir Educational Resources, asserts that 490 connections is
the median for LinkedIn, 229 friends is the median for Facebook, and 130 followers is the
median for Twitter users.
This might create the impression that numbers are king in terms of network strength, but its
important to remember that the quality of the connection and the maintenance of the relationship are what ultimately makes that connection valuable. If you never connect in person
with these so-called contacts, recommend them for a particular skill, post a status, or tweet
a 140-character thought and as a result have a meaningful exchange with someone in
your network your numbers might as well be at zero across the board.
Ask for advice, a referral, or a recommendation and be willing to give the same
in return.
13
Negotiation.
Given that of the top eight skills needing improvement, six were soft skills, it becomes clear
there is much room for improvement, but also tremendous opportunity for those who develop and emphasize their strengths in this increasingly valued area. Not only will enhancing
your soft skills allow you more effectively serve stakeholders, it will ultimately allow you to
more effectively advocate for yourself and advance your career by positioning you to:
14
It should come as no surprise that strong soft skills build rapport with stakeholders and
enhance an internal auditors credibility. As Nicola Rimmer, director in Barclays Internal
Audit (London) and past president of The IIAUK & Ireland, surmises in the 2015 CBOK
Report, Driving Success in a Changing World, You need credibility if you want people to
come to you for advice and information. She said part of building credibility involves being
able to speak to people about what really matters to them without turning every inquiry into
an audit request.
43 percent say
their internal
audit department
is not fully
aligned with the
organizations
strategic plan.
Archie Thomas, a consulting internal auditor in Toronto, Ontario, and the former
CAE of a large mining company, serves on Quality Assessment (QA) teams for The
IIA. He says one of the most common complaints in QAs conducted around the
world is that internal auditors dont understand the business. If you understand an
organizations strategy and how it cascades down through the organizations objectives and you use that in your risk management and audit planning youll start
to talk more like management, says Thomas. They will start to recognize that
you are starting to understand their business. Youll find that respect for internal
audit will go up, your brand will look better, and you will be able to accomplish a
lot more related to helping your organization achieve its objectives.
ORGANIZATIONAL
STRATEGIC PLAN
Indentify Needs
and How to Meet
Needs to Fulfill
Objectives
Assess Impact
of Initiatives
Measure Results
Strategic Planning
Prepare for
the Future
ACME Industries
Strategic Plan
Put Initiatives
into Action
Bugeting and
Resource
Allocation
15
5. Invest in Yourself
When reflecting on the The IIAs 2015 Global Internal Audit Common Body of Knowledge
(CBOK) Study: Driving Success in a Changing World: 10 Imperatives for Internal Audit
reports revelation that internal auditors say they spend 40 hours or less on training and
professional development annually unchanged from 10 years ago IIA Global Chairman
Larry Harringtons shock is palpable. Has the pace at which the world is changing really
not altered since then? asks Harrington. Can anyone today remain indispensable to their
organizations, their profession, or themselves with just 40 hours of training a year?
His point is well taken. So how do you effectively invest in yourself? You begin by setting a
training and development goal. Depending on your organizations commitment to offering
training development opportunities, you may or may not be able to attain the 400 hours
annually that Harrington prescribes for his own staff. However, even doubling your personal
commitment from 40 to 80 hours annually would be significant progress. To do this, make
sure you recognize all the activities that count as training and development, such as:
Participating in training and education customized for you by IIA Career Map
based on your input.
Volunteering for stretch projects above and beyond your current scope of
responsibility.
40
HOURS
80
HOURS
16
Reading research reports, books, and how-to articles on critical issues facing the
profession and the industry in which you work or aspire to work.
Engaging in online forums and message boards on hot topics within the profession
to exchange ideas with colleagues.
Harrington recommends viewing yourself as a brand. This approach can help you make
smart investment decisions by questioning each opportunity using the standard of whether
or not the opportunity supports the brand you want to project to stakeholders, colleagues,
and your supervisor. If you apply this standard to every aspect of your brand, from what you
wear and what you say (including what you post on social media) to the courses you take
and the opportunities you pursue, you will position yourself to rise to your full internal audit
career potential.
What you do
BRAND
What
opportunities
you pursue
17
3 Compelling Reasons
to Earn a Professional
Internal Audit
Certification
According to Robert Halfs 2015 Salary Guide, depending on company size, in 2015 projected salaries for internal auditors with one to three years of experience will range from
$57,500$83,250 representing a nearly four percent increase over 2014, while senior
internal auditors salaries and internal audit managers salaries will increase more than
four percent ranging from $74,000$126,250 and $87,500$144,250 respectively. As
expected, salaries increase with experience and responsibility. However, gaining enough
experience to qualify for more senior and management positions can take years. In the
meantime, consider increasing your earning potential by pursuing professional certification.
Once again, Robert Halfs 2015 Salary Guide cited The IIAs Certified internal Auditor
(CIA) as one of todays in-demand certifications. The CIA exam is administered through a
computer-based testing platform at more than 600 sites around the world throughout the
year. In addition to the CIA, The IIA offers specialized credentials including:
57,500 83,250
74,000126,250
Managers
87,500144,250
18
The idea that professional certification increases earning potential was highlighted by
Theresa Grafenstine, inspector general, U.S. House of Representatives, Washington, DC, in
the CBOK report, Driving Success in a Changing World. In my organization, if people invest
in themselves and get additional certifications, it raises the professionalism of the internal
audit group and we reward that with hard dollars, says Grafenstine.
19
20
Organizational Leadership.
Ethical Leadership.
21
This explains why many employers consider bearing all or part of the
expense of earning a professional certification, such as the CIA. My
firm reimburses for a preparation course and examination fees once
you have obtained certification, says Lathrop.
The impact that certification can have on the caliber of work produced
is motivating some companies to build it into the very fiber of their internal audit function. My colleagues are preparing to take the exam as
it corresponds to the career development plan within the internal audit
charter, says Jorge Badillo, CIA, CCSA, CGAP, CRMA, CISA, regional
internal auditor for the Kinross Gold Corporation in Chile, who was the
first in his native country of Ecuador to earn the CIA designation when
it was introduced there in 2006.
22
23
10/2015-1415
Global Headquarters
247 Maitland Avenue, Altamonte Springs, Florida, 32701-4201 USA
T: +1-407-937-1111 F: +1-407-937-1101
www.globaliia.org www.theiia.org
@THEIIA
The Institute of Internal Auditors