How to become an IT auditor