IT Internal Audit, Senior Associate / Associate Manager

Technology Risk is a specialised field within technology consulting that focuses on identifying, assessing, and mitigating risks associated with an organisation's technology landscape. In today's highly digitised world, businesses heavily rely on technology to drive innovation, enhance operational efficiency, and deliver seamless customer experiences. With the prevalent use of technology comes a corresponding rise in risks, such as cyber threats, data breaches, system failures, regulatory non-compliance, and operational disruptions.

As part of the Technology Risk practice, you will collaborate with a dynamic team of experienced consultants and engage with our clients from different sectors, addressing their technology risk challenges and implementing robust risk management strategies. This role offers extensive learning opportunities, exposure to diverse projects across different geographical locations and emerging technologies, and the chance to contribute to shaping the risk landscape for our clients while helping them navigate the digital landscape with confidence.

What you will do:

As a Technology Risk consultant, your role will encompass a diverse range of responsibilities aimed at mitigating technology-related risks:

• You will be involved in end-to-end technology risk engagements; working alongside team members from various functions to overlay point-of-views (POVs) and industry insights via research and analysis; and formulate solutions and recommendations to address clients’ needs, challenges and risks.
• Executing a variety of IT internal audit services for a diverse portfolio of clients, including IT risk assessments, IT governance, Data governance, IT security incident management, and compliance reviews against frameworks such as SOX, COBIT, ISO 27001, and NIST.
• Preparing clear, concise, and well-structured internal audit documentation, reports, and client deliverables that effectively communicate findings and recommendations to both technical and non-technical audiences.
• Support the assessment of technology risks and evaluate the design and operation of controls related to complex IT environments and systems against KPMG’s frameworks, regulatory and third-party frameworks; and assist in the development of risk-based IT internal audit programmes.
• Participate in the planning and execution of engagements; and close out engagements by producing high quality documentation and reports.
• Identify and communicate value-adding recommendations on technology risk and control management issues, as well as performance improvement opportunities for clients.
• Use advanced tools and technology to analyse and review data.
• Attend meetings with clients to define problem statements, analyse key priorities/issues; and collaborate with team members to conduct workshops, develop responses to client enquiries and ensure timely reporting.
• Assist the management team with business development activities, including formulating KPMG’s offerings and propositions, proposals, presentations and publications.
• Collaborate across global and advisory teams in technology consulting, cyber security, internal audit, and deals advisory to deliver holistic solutions and POVs to clients.