Senior Consultant - Technology Assurance (IT Audit)

KPMG International; Toronto; On-site; CAD 64,000 - 97,000; Full time

Job summary

KPMG in Canada is seeking Senior Consultants to join our Technology Risk Services team in Toronto. You will perform IT risk reviews and IT internal audit support, focusing on data governance, system asset management tooling, IT projects, and information security topics.

Responsibilities include developing risk and control matrices, advising on business process controls, and guiding junior staff. Travel within Canada and internationally may be required.

Qualifications

• Bachelor’s or Master’s degree in Computer Science or equivalent.
• Completion of certifications such as CISA, CRISC, CGEIT, ISO27001 is preferred.
• 2–5 years of IT risk assessment or IT audit experience.
• Strong understanding of IT General Controls and controls-based audits (SOC 1, ISO 27001).

Responsibilities

• Conduct IT risk and controls assessments for internal and external audits.
• Support IT general controls and information security topics.
• Develop risk and control matrices and review procedures.
• Advise on business process controls to client teams.
• Lead or guide junior staff, manage multiple engagements, and travel as needed.

Skills

IT risk assessments

Data governance

Information security

Communication skills

Travel readiness

Education

Bachelor’s or Master’s in Computer Science or equivalent

Certifications: CISA, CRISC, CGEIT, ISO27001

Tools

ITGC Testing

Job description

Overview

At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.

Our Technology Risk Services team is growing and we are looking for Senior Consultants to join our team in Toronto. The Technology Risk Services practice provides a variety of services to our clients. The successful candidate will focus primarily on performing IT risk reviews or providing IT internal audit support across the IT risk domain. Assessment topics include data governance, system asset management tooling and IT projects and broader information security topics. Senior Consultants will also be involved in training and guiding our new campus hires.

What you will do

• Conducting assessments of IT risks and controls in support of internal and external audit and assurance engagements, related to for instance:
  • Data governance models, structures and procedures.
  • IT projects and system implementations.
  • Third party management.
  • System asset management tooling.
• Supporting assessments for broader information security topics as well as IT General Controls (ITGCs).
• Monitoring relevant technology risk standards and practices.
• Developing risk and control matrices and reviewing procedures.
• The review and provision of advice and assistance on business process controls.
• Engagement risk management: quality assurance through file review, engagement planning, development and monitoring, engagement profitability - Simultaneously deliver multiple client engagements of varying size, scope and complexity.
• Business development: taking a proactive active role in the business community to increase awareness of the firm's services and level of commitment to the local market, developing and maturing relationships with internal staff and clients, developing proposals, identifying and pursuing opportunities to increase the practice's penetration in the public and private sector.
• Service Delivery: conducting research, performing technical testing, writing reports, conducting interviews and communicating regularly with clients and resources.
• Guiding field engagement teams as well as coaching and mentoring junior staff members.

What you bring to the role

A successful candidate will possess a mix of the following skills and behaviors:

• Bachelor’s or Master's degree in Computer Science or equivalent.
• Completion of relevant certifications (e.g., CISA, CRISC, CGEIT, ISO27001).
• 2 to 5 years of relevant experience in assessing information technology or business process risk ideally within a large consulting practice.
• Strong understanding and experience withIT General Controls and controls based audits (e.g., SOC 1, ISO 27001) is preferred.
• Experience with implementing and or evaluating data governance structures, system asset tooling, IT projects like system implementations, and IT governance.
• Experience in the testing of controls in different IT environments.
• Ability to work with little supervision and within a team environment.
• Excellent written and oral communication skills, able to effectively express insights.
• Demonstrated ability to learn and succeed in a fast-paced environment.
• Attention to detail and strong organization and investigator skills.
• Strong understanding of business and audit risks.
• Has a high degree of personal confidence, enthusiasm and drive. Willingness and ability to travel both within Canada and internationally.

KPMG Ontario Region Pay Range Information

The expected base salary range for this position is $63,500 to $97,000 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.

Providing you with the support you need to be at your best

#LI-Hybrid

Our Values, The KPMG Way

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

Adjustments and accommodations throughout the recruitment process

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.

AI Usage

Weembrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.

We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.