Job
Description
KPMG India is looking for Executive - IT Audit to join our dynamic team and embark on a rewarding career journey. your role focuses on assessing and evaluating the effectiveness of an organization's digital trust and IT governance practices. Your responsibilities revolve around ensuring that digital systems and processes are secure, compliant, and reliable. Here are some key areas of focus : IT Audit Planning : You participate in the development of the annual IT audit plan, considering risks, regulatory requirements, and industry best practices. You collaborate with stakeholders to identify key areas for evaluation, such as data privacy, cybersecurity, IT governance, and IT infrastructure. Audit Execution : You conduct IT audits and assessments to evaluate the effectiveness of controls, policies, and procedures in ensuring digital trust. This involves reviewing IT processes, systems, and technologies, assessing risks, and identifying control weaknesses, vulnerabilities, or non- compliance issues. IT Governance and Compliance : You evaluate IT governance practices to ensure alignment with industry standards, regulations, and frameworks such as COBIT (Control Objectives for Information and Related Technologies). You assess compliance with relevant laws, regulations (e. g. , GDPR, HIPAA), and internal policies, recommending improvements as necessary. Cybersecurity and Data Protection : You assess the organization's cybersecurity measures and controls, including network security, access controls, incident response, and data protection. You identify vulnerabilities, potential threats, and risks, and provide recommendations for enhancing security posture and mitigating risks. Data Privacy and Confidentiality : You review the organization's data privacy practices to ensure compliance with applicable data protection regulations (e. g. , GDPR, CCPA). You assess data handling procedures, consent mechanisms, data classification, and data breach response plans. You make recommendations to enhance data privacy and protect sensitive information. IT Infrastructure and Operations : You evaluate the reliability and efficiency of IT infrastructure, including networks, servers, databases, and cloud environments. You assess IT operations, change management practices, disaster recovery plans, and business continuity strategies. You identify areas for improvement and recommend measures to enhance reliability and resilience. Technology Risk Management : You assess technology risks associated with emerging technologies, such as cloud computing, artificial intelligence, and IoT (Internet of Things). You evaluate controls and risk mitigation strategies specific to these technologies, ensuring that they align with industry standards and best practices.
