Resume template · Updated October 2026
IT auditor resume template
Short answer
Henrietta suits an IT auditor: a sober, conventional layout fits audit work, with experience first and your degree and certifications after. The fictional sample tests IT general controls and SOX controls at a public company, audits cloud access and tracks findings to closure. Show audits completed, controls tested, findings raised and fixed, frameworks and certifications.
Download the IT auditor sample
Patricia is a fictional IT auditor. Replace every detail with your own before you send it.
The files are made in your browser by Resumity's own exporters, from this sample. The builder opens it as your own resume: click any line to replace it. Free plan, no watermark.
Why Henrietta suits an IT auditor resume
Henrietta prints a summary, then Work Experience, then Education and a skills grid, in black and grey. Audit leaders expect a careful, traditional resume, and this order puts your audit record first and your credentials right after.
Second choice: Meridian. Meridian prints skills first, a fit when the posting stresses cloud platforms or data tools.
What goes in each section, in Henrietta's order
Henrietta prints its sections in a fixed order, the same in the PDF and the Word file. Here is that order for this sample, and what to put in each section.
- Professional Summary. Internal or external audit, industry, frameworks, years of experience and certification.
- Work Experience. Bullets on audits completed, controls tested, findings, remediation, data analytics and areas such as cloud, access or change management.
- Education. Degree with the year; information systems, accounting or computer science fit.
- Skills. IT general controls, frameworks, testing methods, data tools and platforms.
- Certifications. Audit and security certifications with the issuer and year.
The sample resume as text
The same content as the files above, so you can copy a line or compare it with your own.
Patricia Nguyen
IT Auditor, CISA
Minneapolis, MN | patricia.nguyen@example.com | (612) 555-0177 | linkedin.com/in/sample-patricia-nguyen
IT auditor with six years in internal and external audit. Test IT general controls and SOX controls for a public retailer, with a focus on cloud and access management. CISA certified.
Experience
Senior IT Auditor, Northstar Retail Group, Minneapolis, MN (05/2021 to Present)
- Lead about 10 IT audits a year covering cloud platforms, access management, change control and ERP systems.
- Test about 120 IT general controls each year for SOX, with no material weaknesses reported.
- Raised 34 findings in two years; 31 were fixed by the agreed date.
- Wrote SQL and Python checks that test full user access lists instead of samples.
- Advise IT teams on control design before new systems go live.
IT Audit Associate, Lakes Assurance Partners, Minneapolis, MN (08/2018 to 04/2021)
- Tested IT controls for external audit clients in retail and health care.
- Documented walkthroughs and test results.
- Reviewed service organisation control reports.
Education
Bachelor of Science, Management Information Systems, University of Minnesota (05/2018)
Certifications
- Certified Information Systems Auditor (CISA), ISACA (2020)
Skills
IT general controls, SOX testing, Access reviews, Cloud control testing, Risk assessment, SQL, Python, AuditBoard, ACL Analytics, Clear finding write-ups
How to make the sample yours
Show audit volume
Audits per year and controls tested. It shows how much you have done and at what scale.
Show findings and fixes
Findings raised and how many were fixed on time. Closed findings show your audits made a difference.
Name frameworks
SOX, COBIT, NIST or ISO 27001, and how you used them.
Describe technical areas
Cloud, access management, change control, databases or ERP systems you audited.
Show analytics
Scripts or data tools that let you test full populations instead of samples.
Keywords to keep where they are true
Terms this kind of resume is usually searched for. Use the posting's exact wording, and only for work you have done.
- IT auditor
- IT general controls
- SOX testing
- ITGC
- access reviews
- change management
- COBIT
- NIST
- cloud audit
- risk assessment
- CISA
- audit analytics
Mistakes to avoid
- Confidential findings or system names.
- No audit volume or results.
- Long lists of frameworks you have not used.
- Blaming teams in finding descriptions.
How the sample PDF reads in text extractors
We exported this sample with Resumity's PDF exporter in Chrome on 2026-10-29 and read the file back with three open-source text extractors. This shows whether software that turns a PDF into text can recover it; it is not a test of any commercial applicant tracking system. How we test templates.
| Extractor | Name, email, phone | Headings | Bullets intact |
|---|---|---|---|
| pdf.js 4.10.38 | All found | 5 of 5 | 8 of 8 |
| pdftotext (Xpdf) 4.00 | All found | 5 of 5 | 8 of 8 |
| pypdf 6.13.0 | All found | 5 of 5 | 8 of 8 |
Frequently asked questions
What should an IT auditor resume focus on?
Audits completed, controls tested, findings and fixes, frameworks, technical areas and certification. Audit leaders want proof that you find real risks and help close them.
How do I show results in audit?
Use findings raised, findings fixed on time and controls tested. Avoid sharing details of specific weaknesses.
Do I need CISA?
It is the most common IT audit certification and often requested. If you are working toward it, say when you expect to finish.
How do I move from IT into IT audit?
Show control work you did in IT, such as access reviews, change approvals or security checks, and any audit coursework. Technical depth is valued in audit teams.
Should I include data analytics skills?
Yes. Teams increasingly test full populations with scripts, so name the tools and describe what you tested.
How long should the resume be?
One page for most auditors, two for managers. Keep audit volume and findings on the first page.
Will applicant tracking systems read this Henrietta PDF?
The sample PDF read back with its contact details, all 5 section headings and all 8 bullets intact in three open-source text extractors (pdf.js, pdftotext and pypdf). Commercial systems such as Workday, Greenhouse or Taleo were not tested, and each employer configures its own.
Guides and templates for this resume
More in resume templates by job title.