IT, IS, Cybersecurity and/or InfoSec Audit

Hello Cyberspace Experts,
I am a novice seeking guidance on the tools or applications used for IT, IS, Cybersecurity, and Information Security audits. I would appreciate it if experts could assist me with how they identify vulnerabilities in their own or other IT/InfoSec setups.
Additionally, I would like to start with penetration testing, so any help in getting started with it would be greatly appreciated.
Thank you for your kind assistance.

applications audit audits cybersecurity cyberspace experts guidance hello identify information information security infosec own penetration penetration testing security start testing tools vulnerabilities