Technology Consulting-DT IT Audit Assistant Manager

KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value. KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term.

Projects in IT Advisory focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. They are either IS audit, SOX reviews, Internal audit engagements, IT infrastructure review and/or risk advisory including but not limited to IT audit supports in nature.

IT Audit + SAP experience with knowledge of IT governance practicesPrior IT Audit knowledge in areas of ITGC, ITAC (application/automated controls) SOX 404, SOC-1 and SOC-2 AuditsGood to have knowledge of other IT regulations, standards and benchmarks used by the IT industry (e.g. NIST, PCI-DSS, ITIL, OWASP, SOX, COBIT, SSAE18/ISAE 3402 etc.)Technical Knowledge of IT Audit Tools with excellent knowledge of IT Audit process and methodologyExposure to Risk Management and Governance Frameworks/ Systems will be an added advantage Exposure to ERP systems will be added advantageStrong project management, communication (written and verbal) and presentation skillsKnowledge of security measures and auditing practices within various applications, operating systems, and databases.Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance, and professionalismPreferred Certifications - CISA/CISSP//CISMExposure to automation Data Analytics tools such as QlikView/Qlik sense, ACL, Power BI will be an advantageProficiency with Microsoft Word, Excel, Visio, and other MS Office tools

Equal employment opportunity information:

.

Skills Required:

Risk Based IT Internal Audit for Financial Services EntitiesIT SOX 404 Controls Testing, Quality AssuranceInternal Financial Controls related to IT General Controls as part of Financial Statements AuditsIT Risk & Control Self-Assessment Business Systems Controls / IT Application Controls Auditing Emerging Technologies such as Cloud Security, Intelligent Automation, RPA, IoT etc.Working knowledge of programming languages(C/C++/Java/SQL)

Role:

Collaborate with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables. Perform fieldwork and share the daily progress of fieldwork, informing supervisors of engagement status.Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, Backup Management, Incident and Problem Management, SDLC, Data Migration, Batch Job scheduling/monitoring and Business Continuity and Disaster RecoveryPerform Risk Assessment, identification, and Evaluation of Controls, prepare process flow diagrams and document the same in Risk & Control Matrix. Perform business process walkthrough and controls testing for IT Audits.Performing planning and executing audits, including: Information Security reviews Information Technology Infrastructure reviews Application reviews Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues and communicate this information to the project manager.Maintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables.Demonstrate a thorough understanding of complex information systems and apply it to client situations. Use extensive knowledge of the clients business/industry to identify technological developments and evaluate impacts on the work to be performedRisk Based IT Internal Audit for Financial Services EntitiesIT SOX 404 Controls Testing, Quality AssuranceInternal Financial Controls related to IT General Controls as part of Financial Statements AuditsIT Risk & Control Self-Assessment Business Systems Controls / IT Application ControlsAuditing Emerging Technologies such as Cloud Security, Intelligent Automation, RPA, IoT etc.Working knowledge of programming languages(C / C++ / Java / SQL)Coordinate effectively and efficiently with the Engagement manager and the client management keeping both constantly updated regarding project s progress.Monitoring and Tracking for Budget and Time Estimates on engagements.Conducting IT audits, IT Internal Audit, Robotics Process Automation (RPA) AuditsConducting SOX audits, Third Party Security audits Conducting controls assessment in manual/ automated environmentInformation Security AssessmentsConducting OS/DB/Network reviewsPrepare/Review of Policies, Procedures, SOPs