Learn abotu IT control - not in terms of AV, passwords, etc. but the whole gamut from a business perspective.
the better you can interface with the people who run the business (and do the front-line work) the higher you will go. As an IT auditor, the people I see in the biggest jobs are those who are:
- Good at their jobs (which means, obviously, IT)
- Good with people (which quite a few people in IT aren't)
- Good with "the business" (which few people in IT are)
When I say "good with the business", I don't just mean managing budgets, but more to do with aligning IT with the business and demonstrating it to be a value centre as opposed to the classic "cost" black hole. MDs/CEOs/etc. don't understand and, generally, don't' care about IT as long as their Blackberrys (sic) work, so the better you can do at explaining why server 2008 is a good idea, virtualisation would save them X and provide benefit Y, the better-placed you will be.
Always remember: the people who drive the promotions/salaries/etc. wheel aren't those in IT.
Look at things like ITIL, CObIT, SOGP, BS ISO 27001/25999, etc.
There are any number of MCSEs, CCNAs, etc. coming out from developing countries who won't expect the salaries of UK residents so the money ain't what it used to be. However, as pieces of paper showing that you can do a given job, they're vital for that basic progression.