或者说招聘这样的人有什么要求

then you can have a better idea....


and just curious, why you want to know this?

四大一般刚进去后为A1, 有人带着，然后要考什么试再跟公司申请，公司会给钱的。
一般做的，就是检查别的公司的电脑的 security setting 怎么样，有没有什么不standard 的 practice之类的。

我也感兴趣。

重要是IT毕业，最好有点证书。如果是fresh graduate，没有证书也行。

只是有可能工资不高，昨天有个这个职位的HR，打电话问我2k作不作。

It will definitely help my interview. I'm preparing a interview from PwC..

you should stay in project development and move up to PM role, which is only one step away....

frankly speaking, PwC IT auditing is very boring, my last company was their client, they have a sheet of so-call security standard, and went around every computer to check against the checklist, that's all they do....

仅仅是过了考试而已，没有工作经验所以也没有那个certification

IT Security Management and IT Security Consultant. CISSP requires 3 year Security related experience assume you have a degree. CISA requires 4 years.I am not sure about CISA, but for CISSP, you can pass the exam and get a ISC Associate title if you have less than 3 year experience.

However both CISA and CISSP are very theoretical and have very little technical and practical value. If you are a practical person and pursue technical excellence, you should go for GIAC certifications such as (GCIH) from www.sans.org.

In you case, you can try put that in your resume and state that you have passed the CISA exam. But do NOT say that you are certified CISA. Most of the time, the HR people will not differenciate this and assume you are certified since you pass the exam.