Create for free Login

Auditor Resume - internal and external audit, workpapers and findings free example

Антон Литвинов
Антон Литвинов Founder, AI Resume Master
in 𝕏
Published: 25.09.2026 Updated: 25.09.2026

An auditor resume is read by people trained to look for evidence, so vague claims cost more here than in any other field. Two career tracks share the title. External audit sits in a public accounting firm, works to an audit opinion under PCAOB or AICPA standards, and runs on busy season - the January to March crush for calendar year-end clients. Internal audit sits inside a company, reports to an audit committee, works to the IIA's International Professional Practices Framework, and is measured on risk coverage, findings and whether management actually remediated them. The credentials differ too: the CPA is the currency of external audit, the CIA from the Institute of Internal Auditors is the internal audit equivalent, and the CISA from ISACA covers IT audit. Below is a full example that shows scope, sampling and remediation rather than a list of procedures performed.

What you get

  • A complete auditor resume example
  • 3 PDF templates
  • How to write scope, findings and remediation with numbers
  • 6 mistakes that get an audit resume rejected
Create resume → 5 minutes - AI suggestions - ATS friendly
Ready example

Auditor resume example

Built the way an audit director reads: track and standards first, then the areas you covered, the size of what you audited, and findings that led somewhere.

Track and framework stated

External audit under AICPA and PCAOB standards, or internal audit under the IIA framework and SOX 404 testing. These are different jobs and the reader wants to know which one you have done.

Client or entity size

Revenue, headcount, number of locations, public or private. 'Audited a $600M public manufacturer' calibrates your experience instantly; 'audited various clients' does not.

Findings and what happened next

A finding matters when it changed something. Name the control gap, the exposure, and the remediation you agreed with management and then verified as closed.

ATS safe formatting

Standard headings, single column, plain text, no photo, no tables. Big four and corporate audit functions both screen through applicant tracking systems before a human opens the file.

Sample resume text

Use it as a reference: keep the structure and wording, put in your own facts and numbers.

Marcus Halloran

Senior Internal Auditor
Atlanta, GA
m.halloran@example.com
(404) 555-0176
linkedin.com/in/example

Summary

Internal auditor with 6 years across manufacturing and healthcare, currently in a 9-person function at a $1.4B public company. Lead 8 to 10 operational and SOX audits a year, own the annual risk assessment for 14 business processes, and drove remediation of 3 material control gaps in procurement including a $780K duplicate payment exposure. CIA and CISA; CPA candidate, three sections passed.

Experience

Senior Internal Auditor2022 - present

Vantage Ridge Industries, Atlanta, GA

  • Lead 8 to 10 operational and SOX audits a year at a $1.4B public manufacturer with 7 plants, supervising 2 to 3 staff auditors per engagement
  • Own the annual risk assessment covering 14 business processes and present the proposed audit plan to the audit committee each October
  • Ran a full-population duplicate payment analysis in SQL during the procure-to-pay audit that identified $780K of exposure, agreed a three-way match control with the CFO and verified closure at the 90-day follow-up
  • Reduced average finding remediation time from 142 days to 74 by introducing an issue tracker in AuditBoard with named owners and monthly escalation
  • Tested IT general controls across 4 in-scope applications, including quarterly access reviews and change management for the ERP
Internal Auditor2020 - 2022

Piedmont Care Network, Marietta, GA

  • Audited revenue cycle, charge capture and vendor compliance for a regional health system with 4 hospitals and 2,200 beds
  • Tested a 75-item statistical sample of patient billing records and identified a coding control gap affecting an estimated $410K of annual net revenue
  • Supported the external auditors during interim and year-end testing, preparing walkthrough documentation for 6 significant processes
Audit Associate2018 - 2020

Braddock Mullen LLP, Atlanta, GA

  • Staffed 12 financial statement audits a year for private manufacturing, distribution and nonprofit clients ranging from $20M to $300M in revenue
  • Performed inventory observations at 9 warehouse locations and executed receivables confirmation procedures across the client portfolio
  • Carried 5 concurrent engagements through busy season with all filing deadlines met

Education

University of Georgia, Terry College of Business2017 - 2018

Master of Accountancy (150 semester hours completed)

University of Georgia2013 - 2017

Bachelor of Business Administration, Accounting

Skills

IIA International Professional Practices FrameworkSOX 404 scoping, testing and deficiency evaluationCOSO Internal Control - Integrated FrameworkRisk assessment and annual audit plan developmentStatistical and judgemental samplingIT general controls (access, change management, SoD)Full-population testing in SQL and IDEAAuditBoard workpaper and issue trackingFindings writing and remediation follow-upAdvanced Excel (Power Query, pivot tables)

Certifications

  • Certified Internal Auditor (CIA), Institute of Internal Auditors - 2022
  • Certified Information Systems Auditor (CISA), ISACA - 2024
  • CPA candidate - three of four exam sections passed, Georgia

Download a resume template

Build your resume in our AI builder and export in the format you need

PDF
Classic Build
PDF
Modern Build
PDF
ATS friendly Build
Use this template in the builder →
Profile

Auditor summary

Four lines: years of audit experience, the track - external, internal, IT or a regulated specialism - the industries and entity sizes you covered, your credentials, and one outcome that mattered. Audit hiring managers calibrate on client complexity, so the industries and sizes are not filler; they are the main signal in the paragraph.

Be exact about credentials and licences. CPA with the state of licensure, CIA, CISA, CFE, or an accurate progress statement such as 'CPA candidate, three of four sections passed'. Auditors verify things for a living, and an imprecise credential claim on an audit resume is read as a control failure in the candidate.

WeakDetail-oriented auditor with strong analytical skills and experience performing audits, preparing workpapers and identifying areas for improvement across a variety of clients and industries.
StrongInternal auditor with 6 years across manufacturing and healthcare, currently in a 9-person function at a $1.4B public company in Atlanta. Lead 8 to 10 operational and SOX audits a year, own the annual risk assessment for 14 business processes, and drove remediation of 3 material control gaps in procurement, including a duplicate payment exposure of $780K. CIA and CISA, CPA candidate.
Tip
Give the reader coverage numbers: audits led per year, processes in the risk assessment, locations visited, sample sizes tested. Audit is a coverage profession and coverage is what hiring managers benchmark.
Skills

Auditor skills for a resume

Standards, testing technique, evidence, and the ability to sit across a table from an operations director and hold a finding. Name the frameworks and the tools by their real names.

Hard skills

  • Audit standards: AICPA generally accepted auditing standards, PCAOB standards for public company audits, IIA International Professional Practices Framework
  • Internal control frameworks: COSO Internal Control - Integrated Framework, COSO ERM, SOX 404 scoping and testing
  • Risk assessment: annual audit plan build, process risk rating, materiality and scoping decisions
  • Workpaper preparation and review to a standard that supports an independent reperformance
  • Sampling: statistical and judgemental sampling, attribute testing, population completeness, exception evaluation
  • Testing techniques: walkthroughs, inquiry and observation, reperformance, confirmation, cut-off and substantive analytics
  • Financial statement audit areas: revenue recognition, inventory observation, receivables, accruals, related parties
  • IT general controls: access provisioning and review, change management, backup and recovery, segregation of duties
  • Audit and data tools: TeamMate, AuditBoard, Workiva, IDEA or ACL Analytics, Excel, plus SQL for full-population testing
  • Reporting: findings with condition, criteria, cause, effect and recommendation, plus remediation tracking to closure

Soft skills

  • Professional scepticism - not accepting an explanation because it is delivered confidently
  • Independence and the willingness to be unpopular with a business owner you like
  • Writing a finding that is factual and specific without being accusatory
  • Negotiating a remediation date that is realistic rather than symbolic
  • Asking the question that reveals the workaround nobody documented
  • Stamina through busy season without workpaper quality degrading in February
  • Coaching junior staff on evidence standards rather than fixing their work silently
  • Presenting uncomfortable results to an audit committee or a partner
  • Judgement about when an exception is isolated and when it signals a systemic gap
  • Confidentiality with fraud allegations, investigations and pre-release financial information
Experience

How to write audit experience

Formula: the audit, the entity or process size, what you tested and how, and what came out of it. The single strongest bullet type in audit is a finding with a quantified exposure and a verified remediation, because it shows you can do the whole arc rather than just the fieldwork.

Client confidentiality is manageable. If you cannot name the client, describe it - a $600M public specialty manufacturer with 7 plants, a regional health system with 2,200 beds. Give the industry and the scale and the reader gets everything they need without you breaching an engagement letter.

Weak- Performed audit procedures, prepared workpapers and identified control deficiencies for clients across multiple industries.
Strong- Led the procurement and accounts payable audit at a $1.4B manufacturer, testing a 60-item statistical sample across 4 plants and running a full-population duplicate payment analysis in SQL that identified $780K of exposure, then agreed a three-way match control with the CFO and verified closure at the 90-day follow-up.
What to include
Track and standards - industries and entity size - audits led or staffed per year - processes covered - sample sizes and testing methods - findings with exposure - remediation verified - staff supervised.
Education

Education and certifications

A bachelor's degree in accounting is the standard entry point, and CPA licensure in most states requires 150 semester hours of education, which is why so many auditors hold a master's degree or a fifth year. List the degree, the institution, the year and your credit hours if you are working toward the CPA, because recruiters screen on the 150-hour requirement directly.

  • Bachelor's degree in accounting or finance with institution and year, plus GPA while early career
  • Master of Accountancy or additional credits, with total semester hours if you are pursuing the CPA
  • CPA license with the state of licensure, or an exact progress statement such as sections passed
  • CIA, the Certified Internal Auditor from the Institute of Internal Auditors, for the internal audit track
  • CISA from ISACA for IT audit, and CRISC if you work in risk and controls
  • CFE, the Certified Fraud Examiner from the ACFE, for investigative and forensic work
  • Industry-specific training worth listing: single audit and Uniform Guidance for nonprofits and government, or bank regulatory exams
Careful
Never write CPA next to your name without an active license, and always say the state. It is a legally protected title, firms verify it, and the claim is the easiest thing on your resume to check.
Early career

Audit resume for graduates and first movers

Most audit careers start with a campus offer into a public accounting firm, and those processes screen on GPA, accounting credit hours and progress toward the 150-hour requirement long before anything else. If you missed that route, the realistic entries are a smaller regional firm, an internal audit associate role in a large company, or a staff accountant seat that you convert after a couple of years.

Whatever the route, prove the two things audit actually needs: evidence discipline and Excel. An internship with a described testing task, a completed CPA section, and a data analysis you ran on a real dataset go further than a list of coursework titles.

  • Internships written with the actual procedure - inventory counts observed, confirmations sent, samples tested
  • Accounting credit hours completed and progress toward the 150-hour CPA requirement
  • CPA exam sections passed, listed accurately with dates
  • Excel and data evidence: pivot tables, Power Query, or a full-population test you ran in SQL or IDEA
  • Beta Alpha Psi, VITA tax volunteering or a student audit of a campus organisation, with your role
  • Willingness to travel and to work busy season stated plainly, because both are genuine screening questions

Ready to write your auditor resume?

The builder keeps the layout ATS safe and helps you write scope, testing and findings bullets with the coverage numbers audit hiring managers look for.

Create resume → See examples
Mistakes

Common mistakes

Listing procedures instead of results

'Performed walkthroughs and prepared workpapers' describes every auditor alive. What distinguishes you is what the testing found, how large the exposure was, and whether the fix actually happened.

Not saying which kind of audit you do

External financial statement audit, internal operational audit, SOX testing, IT audit and compliance audit are separate markets. A resume that could be any of them gets shortlisted for none of them.

Credential claims that do not survive checking

CPA without a state and an active licence, CIA when you have passed one part, or a certification listed without the awarding body. Audit recruiters verify these first, and an inflated claim ends the process.

No client or entity size

Auditing a $12M nonprofit and a $1.4B public filer are different skill sets. If confidentiality prevents naming the client, describe it by industry, revenue and number of locations.

Findings with no remediation

Identifying a gap is half the job. The half that gets you hired into internal audit is agreeing a fix with management and verifying at follow-up that the control now works.

Designed templates with columns and charts

Parsers discard sidebars, tables and graphics, and a mangled resume from someone whose profession is documentation quality reads badly even when a human eventually sees it. One column, standard headings, one page under ten years.

Takeaways

Takeaways

Remember

  • Say which track: external, internal, IT or compliance
  • Name the standards - PCAOB, AICPA, IIA, COSO, SOX
  • Describe client size even when you cannot name the client
  • Findings need exposure figures and verified remediation
  • State CPA, CIA and CISA exactly, with the awarding body
  • Coverage numbers: audits led, processes, sample sizes
Create resume →
FAQ

Frequently asked questions

External auditors work for an accounting firm and are engaged by a company to give an opinion on its financial statements under AICPA standards, or PCAOB standards for public companies. Their year runs on busy season and their product is the opinion. Internal auditors are employees of the organisation, report functionally to the audit committee, follow the IIA's International Professional Practices Framework, and cover operational, compliance and IT risks as well as financial controls. Their product is findings and remediation. Both are legitimate careers and people move between them, but the resumes emphasise different things: engagement complexity and technical accounting for external, risk coverage and remediation for internal.
For external audit in a public accounting firm, effectively yes if you want to progress past senior, and licensure in most states requires 150 semester hours plus experience and the exam. For internal audit, the CPA is common but not required; the CIA from the Institute of Internal Auditors is the direct credential for the track, and IT auditors typically hold the CISA from ISACA. Many internal auditors hold two, such as CIA plus CISA or CIA plus CFE. List whichever you hold accurately, with the awarding body and the state for a licence.
Describe rather than name. 'A $600M public specialty manufacturer with 7 plants', 'a regional health system with 2,200 beds', 'a mid-market SaaS company approaching its first SOX year' all tell a hiring manager everything they need about complexity without identifying the engagement. Keep findings at the level of the control and the exposure, and never reveal a client's unpublished results, an ongoing investigation or a material weakness that has not been disclosed.
Do not write the words 'worked long hours'. Write the throughput: how many engagements you staffed or led in a season, how many concurrent clients you carried, the size of the teams you supervised and whether deliverables landed on the filing deadline. That answers the real question, which is whether you can carry load and still produce reviewable workpapers in February.
The full arc, in the standard structure: the condition you observed, the criteria it failed against, the cause, the effect quantified where possible, and the recommendation. Then the part most resumes omit - what management agreed to, the date, and whether you verified closure at follow-up. A bullet that runs from observation to verified remediation is worth five bullets about procedures performed.
The common move is after two to four years in a firm, usually into internal audit, SOX compliance, technical accounting or financial reporting. Rewrite the resume around processes rather than engagements: revenue recognition, procure to pay, order to cash, inventory, IT general controls. Add the CIA if you are targeting internal audit specifically, and lead with data analytics ability, because internal audit functions increasingly want full-population testing in SQL, IDEA or ACL rather than sample-only work.
One page under ten years of experience, which covers staff, senior and most managers. Two pages become normal when you are running an audit plan, managing teams and dealing with an audit committee, because the plan, the coverage and the people are all substantive. Whatever the length, avoid a workpaper-style dump of every engagement; group by industry or process and lead with the largest and most complex.
Check current postings for your city, track and level rather than any figure quoted in an article, since firm pay, industry pay and metro differences are all significant. The factors that consistently move it are the CPA for external audit and the CIA or CISA for internal, specialisation in a regulated or technical area such as financial services, insurance, IT audit or forensic and fraud work, experience with public company reporting and SOX at scale, data analytics capability that replaces sampling with full-population testing, and moving from performing audits to owning the risk assessment and the audit plan. Firm-to-industry moves usually change the shape of the package rather than only the number, so compare total compensation.
Useful reading

Resume and interview advice

Tips

How to Tailor a Resume to a Job Description in 10 Minutes

A step-by-step routine with a time budget: how to customize your resume for a specific job in 10 minutes, use keywords from the posting and invent nothing. With a before-and-after example for a B2B sales role.

Read → ATS

What Is an ATS System? Applicant Tracking Explained

How recruiters work with applications inside an applicant tracking system, whether a "robot" really rejects your resume, and what to do so your resume gets found.

Read → AI

AI Resume Builder in Claude and ChatGPT via MCP

Create a resume with AI in a normal conversation with Claude or ChatGPT, and get a real document with a template, layout and PDF instead of a wall of text in the chat.

Read →
Related Professions

Resume examples for other roles

→

Accountant
→

Financial Analyst
→

Bookkeeper
→

Business Analyst
Create resume →