In 2004, Jaewon Lee held multiple IT certifications, but he wanted to broaden his knowledge of IT risk and control. This interest led him to learn more about ISACA and its certifications. After earning the Certified Information Systems Auditor (CISA) certification, Lee joined Citibank��s IT audit department. ��Having the CISA certification proved valuable as I made the transition from IT management to IT audit,�� he says. ��ISACA certifications are a reflection of one��s industry and professional knowledge and the continuing professional education (CPE) hours required to maintain these certifications ensure your knowledge is current.��

Lee says that when he became an auditor about a decade ago, the IT audit function was still in its infancy in Korea, but now it has become a critical part of IT departments, especially within the finance industry.

In 2007, ING Group offered Lee a position when the organization found itself looking for an IT auditor who was certified and experienced. While Lee finds his certifications valuable, he says that having relevant experience is just as important. ��As far as IT audit is concerned, even if you are not an auditor, you can gain the relevant experience through ISACA conferences (e.g., Computer Audit, Control and Security [CACS] conferences) and seminars (e.g., e-learning opportunities, ISACA Training Week offerings). These are effective ways of gaining the latest, most relevant industry knowledge. Attending these events is also a good way to build your professional network. One thing I have learned is that one should not limit oneself to a current role or industry.��

Lee continued to challenge himself and earned the Certified in the Governance of Enterprise IT (CGEIT) and Certified in Risk and Information Systems Control (CRISC) designations. Having these certifications, in addition to his professional experience, gave Lee the opportunity to rewrite the existing IT risk policy within the group and further advance his career.

Earlier this year, Morgan Stanley hired Lee to oversee its IT risk governance—a priority for the firm. ��ISACA certifications combined with up-to-date knowledge and professional experience helped me to get the job at Morgan Stanley. The firm also supports continuing learning and encourages employees to acquire relevant certifications to excel in their jobs,�� he says. ��I strongly believe that these certifications not only demonstrate technical knowledge, but also build trust and confidence for those looking to advance or make changes in their careers.��

Lee advises fellow IT colleagues to act immediately to acquire these skills and certifications. ��When I look back at my career path, including my current assignment, it is clear that opportunities were more readily available to me because I was well prepared,�� he says. ��There is no such thing as a coincidence or luck. You should continuously ask yourself questions such as, ��What are your professional goals and how are you preparing for them?�� Have you acquired industry knowledge from associations such as ISACA and utilized it? If you have not started yet, it is time to act.��

�� �ڼ��� ����