Today’s IT auditor is expected to understand technology, improve processes, and help organisations work smarter and more efficiently.
Meet the Auditor: Sonja van der Westhuizen
For this edition of our “Meet the Auditor” series, we spoke to Sonja van der Westhuizen about her unexpected journey to become an IT auditor, her passion for automation, and why auditors often know more about how a business operates than people realise.
Tell us about your career path — what brought you to SurTech?
Funny story – I studied Internal Auditing and had IT Auditing as a subject for one semester. After that semester, I promised myself I would never become an IT Auditor.
Life had other plans.
At the time, there were very few opportunities in Polokwane, and one of them was an IT Auditor role at a Provincial Government Department. I applied, got the job, and quickly discovered a real passion for IT auditing.
Over time, our team built such strong relationships that departments began requesting our services rather than avoiding audits altogether.
After nearly 10 years in IT audit, I realised that while I enjoyed IT security, my real interest was in applications and software. I later moved into a Business Analyst role, where I worked between clients and development teams to help improve systems and processes.
That experience showed me how much impact the right technology can have on people’s daily work.
Later, after relocating to Gauteng and working as an IT GRC Specialist, I experienced firsthand how difficult governance processes can become without automation – and that’s what ultimately led me to SurTech.
I wanted to help organisations move beyond spreadsheets and manual processes and show them how governance technology can genuinely improve operations.
What inspired you to pursue a career in internal auditing?
I always knew I wanted to improve the way companies operate.
As an auditor, you often have visibility into areas of the business that even some executives don’t fully see. That puts you in a unique position to identify opportunities for improvement.
What skills are most important for modern auditors?
Reading between the lines.
When engaging with clients, you really need to understand what people mean when they communicate. Things are not always as they sound.
What’s the most auditor thing about you outside of work?
If there were documents for this, it would have worked better!
What phrase does every auditor hear weekly?
“I have actual work to do.”
– a phrase every auditor hears weekly.
Complete the phrase: “You know you’re an auditor when…”
You start giving people suggestions on how to improve their work processes next to the braai.
What’s one thing AI will never replace in audit?
Common sense.
What’s the green flag that tells you an organisation takes governance seriously?
When policies are not only updated but implemented throughout the organisation – and not just by the compliance department.
How is technology or AI changing internal audit?
Automation is becoming more accessible to auditors and is no longer limited to organisations with large budgets.
AI is helping auditors think differently, improve reporting processes, and work more efficiently.
Why is auditing the coolest job in the world?
An auditor has access to all parts of a company and is not confined to one division.
That gives you a clear view of how the organisation really works, often resulting in a broader understanding of the business than even the CEO has.
As Internal Audit Awareness Month continues, professionals like Sonja remind us that modern audit is becoming increasingly connected to technology, process improvement, and strategic governance.
At SurTech, we’re proud to support organisations across South Africa as they modernise audit, risk, and compliance practices.
