An IT auditor is an audit professional with special MIS knowledge who works with companies to assess the risks associated with their IT applications and then determines if the company has adequate controls in place to manage that risk. IT auditors may work for a public accounting firm (external audit) or for the company itself (internal audit).