FSI Consulting to IT Control, Security and Audit???

I work with a top consulting firm (focusing on financial services industry) and i am thinking of changing career. I have been thinking of another global professional services company that does a lot of Risk Management-IT audit jobs. I just seem a bit confused….is IT control and Securities the future? I have to sit for the CISA exams and i sort of love the curriculum. Some advice needed here……is it worth changing???