IT Internal Audit, Senior Associate / Associate Manager

KPMG in Singapore is part of a global organization of independent professional services firms providing Audit, Tax and Advisory services. We operate in 138 countries and territories with more than 276,000 partners and employees working in member firms around the world. Each KPMG firm is a legally distinct and separate entity and describes itself as such.

KPMG International Limited is a private English company limited by guarantee. KPMG International Limited and its related entities do not provide services to clients.

Job Description

Technology Risk is a specialised field within technology consulting that focuses on identifying, assessing, and mitigating risks associated with an organisation's technology landscape. In today's highly digitised world, businesses heavily rely on technology to drive innovation, enhance operational efficiency, and deliver seamless customer experiences.

With the prevalent use of technology comes a corresponding rise in risks, such as cyber threats, data breaches, system failures, regulatory non-compliance, and operational disruptions.

As part of the Technology Risk practice, you will collaborate with a dynamic team of experienced consultants and engage with our clients from different sectors, addressing their technology risk challenges and implementing robust risk management strategies.

This role offers extensive learning opportunities, exposure to diverse projects across different geographical locations and emerging technologies, and the chance to contribute to shaping the risk landscape for our clients while helping them navigate the digital landscape with confidence.

What You Will Do

As a Technology Risk consultant, your role will encompass a diverse range of responsibilities aimed at mitigating technology-related risks:

• You will be involved in end-to-end technology risk engagements; working alongside team members from various functions to overlay point-of-views (POVs) and industry insights via research and analysis; and formulate solutions and recommendations to address clients’ needs, challenges and risks.
• Executing a variety of IT internal audit services for a diverse portfolio of clients, including IT risk assessments, IT governance, Data governance, IT security incident management, and compliance reviews against frameworks such as SOX, COBIT, ISO 27001, and NIST.
• Preparing clear, concise, and well-structured internal audit documentation, reports, and client deliverables that effectively communicate findings and recommendations to both technical and non-technical audiences.
• Support the assessment of technology risks and evaluate the design and operation of controls related to complex IT environments and systems against KPMG’s frameworks, regulatory and third-party frameworks; and assist in the development of risk-based IT internal audit programmes.
• Participate in the planning and execution of engagements; and close out engagements by producing high quality documentation and reports.
• Identify and communicate value-adding recommendations on technology risk and control management issues, as well as performance improvement opportunities for clients.
• Use advanced tools and technology to analyse and review data.
• Attend meetings with clients to define problem statements, analyse key priorities/issues; and collaborate with team members to conduct workshops, develop responses to client enquiries and ensure timely reporting.
• Assist the management team with business development activities, including formulating KPMG’s offerings and propositions, proposals, presentations and publications.
• Collaborate across global and advisory teams in technology consulting, cyber security, internal audit, and deals advisory to deliver holistic solutions and POVs to clients.

⠀

Who You Are

• Possess recognised tertiary qualifications in Computer Science, Information Technology, Information Systems, Computer Engineering, Accountancy/Commerce/Business, or related disciplines.
• First-hand experience of 1 to 2 years in IT audit/assurance, or IT advisory; experience in any of the following areas will be advantageous: IT Risk and Compliance, IT Governance, IT Internal Controls, IT Audit.
• Hands-on experience in data analytics tools and technologies, such as Python, Power BI, SQL or ACL Analytics.
• Certifications such as CISA, CISSP, CCSP or equivalent will be advantageous.
• Good knowledge of the system development lifecycle, information security, IT management, ability to learn emerging methodologies, technologies and new skills quickly.
• Self-motivated individual with inquisitive, innovative and resourceful mindset, able to work under pressure with changing priorities.
• Strong analytical and problem-solving skills, demonstrated interpersonal, organisational, presentation and report writing skills with attention to details.

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities.

As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth.

One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.