The GRC & IT Audit program prepares you for governance, risk, compliance and IT audit roles. You will work through real frameworks, build the documents auditors ask for, and practise testing controls the way consulting and in-house audit teams do.
Who this course is for
- Graduates from any background, including non-IT and commerce
- IT and operations professionals moving into compliance or audit
- Professionals preparing for GRC Analyst, IT Auditor or ISMS roles
What you will learn
- GRC fundamentals: governance, policies, roles and responsibilities
- ISO/IEC 27001:2022 clauses 4 to 10 and Annex A controls
- Risk assessment, risk treatment and building a risk register
- SOX and ITGC: access management, change management and IT operations controls
- Third-party risk management (TPRM) and vendor assessments
- Audit planning, sampling, evidence collection and writing findings
- An overview of frameworks such as NIST CSF, SOC 2, PCI DSS and the DPDP Act
Career support
You finish with sample audit workpapers, a risk register and policy documents you can discuss in interviews, plus resume and mock interview support.
What You Will Learn
- ISO 27001:2022 clause-by-clause walkthrough
- SOX ITGC control testing practice
- Risk register and risk treatment exercises
- Third-party risk assessment templates
- Audit evidence and findings writing
- Resume, LinkedIn and mock interview support
Tools & Technologies Covered
- ISO/IEC 27001:2022
- SOX ITGC
- NIST CSF
- SOC 2
- PCI DSS
- Risk registers
- Excel audit workpapers