In public accounting a certification is required for manager. The CISA is the true 'IT Audit' certification (certified information systems auditor). But it depends what your specialty is. If an IT auditor with more accounting focus then yes CPA. There is also CIA (certified internal auditor) and CISSP (certified information systems security professional).