Road to become a Security Auditor?
Home > IT Answers > Security > Road to become a Security Auditor?
Ind
5 pts.
0
Q:
Road to become a Security Auditor?
Security Auditor, Security auditing, Security audits, IT careers, Security careers, CCIE, ISMS, CISA, Certified Information Systems Auditor, Cisco Certified Internetwork Expert, Information Security Management System
Hi,

I am really confused about way to follow to become a Security Auditor... and the opportunities it has in future.. esp. in India ??
Currently I am working as a Security Consultant but dealing only with Security Related products
including Firewalls, NMS, IPS etc and not Standards like BS7799, ISO27001, CoBit etc..
Being in Networking since 4 years now I am confused about approaching technical certs in Security like CCIE security for example or go for ISMS certs or CISA.. which could help me to achieve my goal of Security & Network Auditor.
As I am unsure about the value of ISMS certs for an individual to land up in Auditing Field along with the career opportunities.

Currently I hold CCNA, CeH and perusing CISSP.

Any suggestions or tips will be highly appreciated.. as like every1 even I am concerned about my career and the path to choose.

Thanks.
ASKED: Mar 26 2009  8:22 AM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
Labnuke99
26290 pts.
0
A:
 RATE THIS ANSWER
+1
Click to Vote:
  •   1
  •  0
  • AddThis Social Bookmark Button
It sounds like your focus has been on the technical certifications, while valuable may not fully prepare you for an auditing position. You should consider the CISA and/or CISM certifications from ISACA.
Last Answered: Mar 26 2009  1:36 PM GMT by Labnuke99   26290 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

BrentSheets   6535 pts.  |   Mar 26 2009  12:49PM GMT

Hi Ind and welcome to IT Knowledge Exchange. You may wish to visit the Sister CISA CISSP blog by fellow member Arian Eigen Heald. Eigen has a wealth of information about the topic. Thanks.

 

DiegoDH   275 pts.  |   Mar 31 2009  6:20AM GMT

CISA is the IT auditor certification, and the one you’d look into. CISM is focused on “Security management”.

I’d recommend that before looking for certification (which will require actual “hands-on’ experience as IT auditor) you join ISACA as a member, and access the huge ammount of resources it offers.

Additionally, try in your current job to do some work as internal auditor, following the ISACA guidelines (and ideally having an experienced auditor as coach).

Good luck!

 

DiegoDH   275 pts.  |   Mar 31 2009  6:22AM GMT

Forgot to say, I believe CISSP will complement CISA beautifully. Go after that first, if you’ve already have experience in Security.

That’s the path I aim to follow.

 
0