Job
Description
As a Senior in the IT Audit & Assurance, Risk Consulting team, you will be responsible for assisting in planning activities, developing audit programs, and executing internal audits and IT control assessments in various areas such as IT strategy and governance, IT operations, network and infrastructure security, cloud and third-party risk, programs and projects, automation, GITCs and application controls, and regulatory/compliance requirements. You will review clients" processes and controls against leading practices and industry frameworks, identify gaps in design and execution, and effectively communicate issues and recommendations to engagement leads and client management. Additionally, you will work closely with client management teams to help implement new processes and controls to address key risks as necessary. You will be expected to draft comprehensive executive summaries and final reports for delivery to client senior management, as well as document and review engagement workpapers in accordance with standard KPMG and industry-accepted internal audit methodologies. You will also assist in kick-off, status, and closing meetings with the engagement team and clients, contributing to IT Audit knowledge base and internal practice development initiatives. Furthermore, you will support AM and Managers in managing and upskilling the team. In terms of mandatory technical and functional skills, you should possess knowledge of security measures and auditing practices within various operating systems, databases, and applications. Experience in assessing risks across different business processes, particularly in the Financial Services sector, is required. You should have the ability to identify control gaps and effectively communicate audit findings and control redesign recommendations to senior management and clients. Hands-on experience with IT General Controls, IT Application controls testing, IT Internal Audits, IT Risk Assessments, and Third-Party Risk Management is essential. Knowledge of regulations impacting the privacy, integrity, and availability of customer Personally Identifiable Information (PII) is also necessary. Moreover, you should have exposure to leading IT Audit engagements and working on Identity Access Management aspects like user management, authentication, and authorization. Team-leading experience, as well as performance management skills in your current or previous roles, are expected. Technical skills required include prior experience in evaluating the design and operating effectiveness of technology controls over various IT platforms such as ERP suites, Windows, Unix/Linux, iSeries, Oracle database, DB2, and SQL. For qualifications, educational requirements include a degree in BE/B-Tech/MCA/BSC-IT/MBA. Certifications such as CISA, CRISC, CISSP, CCSK, etc., are preferred and cleared/certified candidates will be given preference.,