OrgLadder
Roles › Chief Executive Officer › Chief Financial Officer › Internal Audit & Risk
Finance

What does a Internal Auditor do?

Independently tests whether controls and processes work, and reports to the board.

Steady demand Team: Internal Audit & Risk Reports into: Chief Financial Officer

What they actually do

Hiring demand

Steady demand. Regular postings, but fewer than the busiest roles. Expect a longer search or more specialization.

Ad space

Who they work with

Board audit committeeAccountingIT securityCompliance

Typical tools

Audit softwareData analysis tools

Skills to get there

Title ladder

Common titles for this role at each level. Companies vary; see Role titles decoded.

LevelTypical titles
EntryJunior / Associate Internal Auditor · Internal Auditor I
MidInternal Auditor · Internal Auditor II
SeniorSenior Internal Auditor · Lead Internal Auditor
Expert (IC track)Staff / Principal Internal Auditor
Management trackManager, Internal Audit & Risk → Director of Internal Audit & Risk → VP
See the free training path →

See current openings

Searching for: Internal Auditor · anywhere in the US · change

Also try:

Opens the job board's own search; results and counts are theirs.

How to get here

Salary (US) as of 2026-11

Median$85K
Typical range$65K–$102K

Sources:

Senior/manager figure omitted: the senior posting cited (Sophos) listed no salary and Robert Half's guide page did not show an audit manager line. IT audit and SOX-heavy public-company roles pay at the top of the range.

Experience to get here

Entry level0-2 years
Typical title2-6 years

Bachelor's in accounting, finance, information systems or business is required in every posting cited. Many internal auditors start in public accounting (external audit).

Typical prior roles

Audit Associate (external audit, Big 4 / regional)Staff AccountantSOX / Controls AnalystIT Auditor or IT Risk Analyst

Must have

Milestones people hit first

Certifications

Certified Internal Auditor (CIA)The IIA (Institute of Internal Auditors)
Preferredin postings: often
Exam fee$870
TrainingIIA CIA Learning System or Becker review; prices not published by the vendor
Renewalannual self-attestation of CPE; hours not published by the vendor
Typical total$990 (member: $120 application + $310 + $280 + $280) to $1,515 (non-member); prices change Jan 2027

Time: 3 parts; must pass all within 3 years of acceptance
Prerequisites: Bachelor's + 2 years internal audit experience (1 year with a master's); challenge exam for CPA/CA and CISA holders

The internal-audit credential: postings list 'CPA, CIA, or CISA' as preferred/required and 'Certified Internal Auditor' as nice-to-have.

Preferredin postings: often
Exam fee$575
TrainingISACA review manual/online review; prices not published by the vendor
Renewalannual maintenance fee and CPE per ISACA policy (amounts not published by the vendor)
Typical total$575 (ISACA member) to $760 (non-member) exam, plus study materials

Time: single exam; experience application required
Prerequisites: Submit application demonstrating experience requirements (details on ISACA support page)

Expected for IT-audit tracks: 'Certified Information Systems Auditor (CISA) designation' preferred in IT auditor postings.

Certified Public Accountant (CPA)State boards of accountancy / NASBA / AICPA
Preferredin postings: sometimes
Exam fee$1,075
Trainingreview course cost not published by the vendor
Renewalstate license renewal and CPE; varies by state
Typical total$1,200-1,500 in exam/application fees before a review course (Virginia fees; vary by state)

Time: 12-18 months for four sections (common; not published by the vendor)
Prerequisites: State-specific education and experience rules

Listed with CIA/CISA in senior internal auditor postings; the natural credential for auditors coming from public accounting.

Training & learning

Sources & notes

CIA CPE hours and CISA annual maintenance fee/CPE hours are not published on the vendor pages cited. Senior/manager salary omitted for lack of a sourced figure. Glassdoor internal auditor page not available; Coursera 'Auditing I' (Illinois) pages also failed, so no dedicated audit MOOC is listed. The IIA says CIA pricing changes 4 January 2027.

Figures are US, from the sources listed, and change often; verify before deciding.

Related roles

See it on the org chart

Open Internal Audit & Risk in the interactive chart →