Consultant / Senior Consultant, Technology Risk, Technology Consulting (MJ005231)

KPMG China; Hong Kong; On-site; HKD 300,000 - 500,000; Full time

Benefits offered by this job

Career development and learning path

Access to cybersecurity learning resources

Opportunities for secondment within KPMG Global

Job summary

KPMG China is seeking both Senior Consultants and Consultants to join their Technology Risk team in Hong Kong. You'll focus on IT risk compliance and audits, assisting clients in cybersecurity, IT operations, and regulatory requirements. This role offers ample career development opportunities including coaching and access to security resources.

Candidates should have a Bachelor's degree, with preferred certifications like CISA or CISSP, and at least 2 years of IT audit or risk management experience.

Qualifications

• Minimum of 2 years of experience in IT internal audit, risk or compliance.
• Experience leading IT audits or risk assessments.
• Proficiency in project management and technical writing.

Responsibilities

• Plan and execute IT risk assessments focused on compliance.
• Assist in implementation of new processes to address key risks.
• Draft executive summaries and final reports for clients.

Skills

IT internal audit

IT risk management

IT compliance

Strong communication skills

Education

Bachelor's degree

CISA, PMP, CISSP or CRISC certification

Tools

COBIT

NIST CSF

ITIL

Job description

KPMG China provides multidisciplinary services from audit and tax to advisory, with a strong focus on serving our clients’ needs and their industries. Not only do we have an overriding commitment to provide the highest quality services for our clients, but we also strive to become a responsible corporate citizen that has a positive impact on our environment and community. At KPMG, you’ll translate insights into action and reveal opportunities for all—our teams, our clients and our world.

Service Line Overview

At KPMG's Consulting practice, we do not limit ourselves to either strategy or implementation. We deliver both. Our Hong Kong division is the fastest growing within KPMG China and represents a young and enthusiastic team that always pushes for success. Since our inception, we have acquired in-depth knowledge of an incredibly broad range of sectors and services.

KPMG’s Technology Risk team focuses on the use of technology by our clients and helps the 1st, 2nd and 3rd line of defense navigate relevant technology risk and compliance matters in a strategic and tactical manner. Our professionals do this by leveraging our strong industry, IT control and technology focus, deploying leading methodologies and tools, applying our objectivity, using a balanced approach to growth and risk, utilizing comprehensive global breadth and local knowledge, and calling upon our deep understanding of relevant business, financial, and regulatory inter‑dependencies.

KPMG is currently seeking both Senior Consultants and Consultants to join the team.

Key Responsibilities

• Assist in planning activities, development of assessment program, and execution of IT‑related internal audits and risk assessments in the following areas: cybersecurity, IT strategy and governance, IT operations, business continuity and disaster recovery, network and infrastructure security, cloud and third‑party risk, programs and projects, automation, GITCs and application controls, and regulatory/compliance requirements
• Review clients’ processes and controls against leading practice and industry frameworks, identify gaps in design and execution, and communicate issues and recommendations to engagement managers and client management
• Work with client management team to assist in implementation of new processes and controls to address key risks, as necessary
• Draft comprehensive executive summaries and final reports for delivery to client senior management and document and review engagement workpapers in accordance with standard KPMG and industry‑accepted methodologies
• Assist in kickoff, status, and closing meetings with engagement team and client and contribute to technology risk knowledge base and internal practice development initiatives

Additional Responsibilities For Senior Consultant

• Plan and execute IT‑related risk assessments with a focus on strategic, operational and regulatory/compliance related risks
• Lead kickoff, status, and closing meetings with engagement team and client and contribute to technology risk knowledge base and internal practice development initiatives
• Supervise consultants on engagements

Experience & Background

• Minimum of 2 years of experience working within an IT internal audit, IT risk or IT compliance function as an internal employee or as part of a professional consultancy firm
• Bachelor's degree from an accredited college/university or equivalent work experience; CISA, PMP, CISSP or CRISC certification is preferred
• Familiarity leading and executing risk‑based IT‑related internal audits and/or risk and control assessments, leveraging IT governance and control frameworks such as COBIT, NIST CSF, NIST 800‑53, ITIL or regulatory compliance requirements
• Experience in implementation of internal control processes and programs for IT
• Proficiency in executing projects in accordance with leading practice project management principles
• Strong leadership and communication skills, technical knowledge, and the ability to write at a publication quality level in order to communicate findings and recommendations to the clients and senior management team

Benefits we offer

KPMG is looking for someone who is passionate about helping our clients with their cyber security challenges. In return, we are helping you to develop your skills and career within the KPMG network.

• Well‑structured career development and learning path, 1‑to‑1 coaching by our cybersecurity partners
• Access to various cyber security learning resources
• Wide exposure to working with leading financial institutions and multi‑national corporations
• Continuous sponsorship and support on professional certificate development (i.e. Offensive Security, GIAC, CREST, etc.)
• Opportunities for secondment / exchange within KPMG Global network based on staff performance and preference
• One annual professional membership sponsorship on the approved list
• Work in a passionate team with blended cybersecurity and technology risk talents

Equal Opportunity Employer

At KPMG China, we are committed to being an equal opportunity employer, with zero tolerance for any form of discrimination against any persons. It is important for us to create an inclusive, diverse and agile workplace for our people to develop and thrive at both a personal and professional level.