The GRC & IT Audit program prepares you for governance, risk, compliance and IT audit roles. You will work through real frameworks, build the documents auditors ask for, and practise testing controls the way consulting and in-house audit teams do.
Who this course is for
- Graduates from any background, including non-IT and commerce
- IT and operations professionals moving into compliance or audit
- Professionals preparing for GRC Analyst, IT Auditor or ISMS roles
What you will learn
- GRC fundamentals: governance, policies, roles and responsibilities
- ISO/IEC 27001:2022 clauses 4 to 10 and Annex A controls
- Risk assessment, risk treatment and building a risk register
- SOX and ITGC: access management, change management and IT operations controls
- Third-party risk management (TPRM) and vendor assessments
- Audit planning, sampling, evidence collection and writing findings
- An overview of frameworks such as NIST CSF, SOC 2, PCI DSS and the DPDP Act
Career support
You finish with sample audit workpapers, a risk register and policy documents you can discuss in interviews, plus resume and mock interview support.