Where do AI and automation genuinely help internal audit without weakening control over the work?

A real Reddit thread titled 'Making the switch from an IT internal audit role in a bank to a junior M&A or investment analyst position.' raised a practical CIA or internal-audit issue that needs a cleaner decision framework than the usual forum back-and-forth. I want the exam-ready or career-ready version of the problem using the actual source signal rather than generic advice. Source context: Hi all, I am a former external auditor with experience at KPMG (as an intern) and EY (for six months—during which I started ACCA but only completed two exams). I then transitioned to a large bank's internal audit IT team, where I have been working for 3 years. My focus has been on ITGC, compliance assessments, and secu