Transitioning from Fraud Investigations to IT Audit — need insights?

I’m currently working in fraud investigations (mid-level) and almost done with my CFE certification. Once that’s finished, I plan to go for CISA because I want to move into IT audit or GRC roles.

My current work is more on the investigation and fraud review side — reviewing transactions and identifying patterns using data, verifying evidence, and writing investigative reports — but not much hands-on IT audit yet. I’m really interested in bridging that gap and getting into something more technical , like Secuirty Analyst or GRC Specialist roles.

Thank you