Do IT auditors need certification?

Yes, certifications like CISA (Certified Information Systems Auditor) or CISSP are highly valued and often required.