firstly, nothing wrong with risk and audit. risk is a growth area, especially around cyber-security risk. i think a lot of companies have problems with hackers and their computers these days so could be a good thing to get into.also yes consulting experience will help you get ahead in the IT world, if you work hard and do a good job then you maximise your chances of getting ahead generally!