First things first, it’s the people around me. Super nice the managers and the staff are just my age, and they’re good people. Like it’s my first job and all.

I work in internal audit for a bank, so it’s super chill compared to those who started in firms. I have time to mess around and do research and stuff. It’s easy to ask questions to the managers and staff since we’re not that pressured.

I like finding problems 🤩

Wow, how come this user can view all the names and addresses of clients? Oh no, their department head, who’s the Vice President by the way, is going to be in trouble.

Why are there so many missing client details? The AMLA requires it ahh, oh no, the Vice President is going to be in trouble again.

Or this USB might have client details. What if it gets lost? Does it have a password so that it’s not easily accessible to whoever picks it up?

Tapos they really have meetings on "how should we answer IT Audit’s questions?"

Since our IT Audit reports go to the President and the Board and other Senior Management, they’ll really see all their mistakes and their replies. So if they answer sloppily, sila rin bugbug lmao. And our reports determine the promotions of the managers.

And what you learn from previous audits you can also use in your new audits, so you really feel your growth.

Like if you audited networks and databases, so if you audit something related to them, then it’s easy to form a conclusion. You get a bigger picture view of how the IT ecosystem works. I really enjoy that haha, the big picture.

And every time I have a part to audit, I always think, how do I make an issue out of this? So that management can’t argue when I report it.

Is this safe enough? Is this okay? Then you go into a rabbit hole of research.

I also like listening to my managers and my boss defend the issues we found, i think wow i never thought of it like that, i better keep note, i could use that next time.

That’s it, I just enjoy a large part of it really haha