IT Internal Audit, Senior Associate / Associate Manager

KPMG Services Pte Ltd; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

KPMG Services Pte Ltd in Singapore seeks a Technology Risk consultant to help identify, assess, and mitigate technology-related risks across client engagements. You will work with a dynamic team, applying industry insights and research to strengthen risk management in digitised environments.

The role covers IT internal audits, data governance, IT security, and control testing against frameworks such as ISO 27001 and NIST, with collaboration to deliver practical POVs and value to clients.

Responsibilities

• End-to-end technology risk engagements; overlay POVs and industry insights via research and analysis; formulate solutions and recommendations to address clients’ needs, challenges and risks.
• Execute IT internal audit services for a diverse portfolio of clients, including IT risk assessments, IT governance, Data governance, IT security incident management, and compliance reviews against frameworks such as SOX, COBIT, ISO 27001, and NIST.
• Prepare clear, concise internal audit documentation, reports, and client deliverables communicating findings to technical and non-technical audiences.
• Support assessment of technology risks and evaluate design and operation of controls in complex IT environments against KPMG frameworks; assist in development of risk-based IT internal audit programmes.
• Participate in planning and execution of engagements; close out engagements with high-quality documentation and reports.
• Identify value-adding recommendations on technology risk and control management issues and performance improvement opportunities for clients.
• Use advanced tools and technology to analyse and review data.
• Attend meetings with clients to define problem statements, analyze priorities, and collaborate on workshops and responses to client enquiries.
• Assist management with business development activities, including formulating KPMG’s offerings and propositions, proposals, presentations and publications.
• Collaborate across global advisory teams to deliver holistic solutions and POVs to clients.

Job description

Technology Risk is a specialised field within technology consulting that focuses on identifying, assessing, and mitigating risks associated with an organisation's technology landscape. In today's highly digitised world, businesses heavily rely on technology to drive innovation, enhance operational efficiency, and deliver seamless customer experiences. With the prevalent use of technology comes a corresponding rise in risks, such as cyber threats, data breaches, system failures, regulatory non-compliance, and operational disruptions.

As part of the Technology Risk practice, you will collaborate with a dynamic team of experienced consultants and engage with our clients from different sectors, addressing their technology risk challenges and implementing robust risk management strategies. This role offers extensive learning opportunities, exposure to diverse projects across different geographical locations and emerging technologies, and the chance to contribute to shaping the risk landscape for your clients while helping them navigate the digital landscape with confidence.

What you will do:

As a Technology Risk consultant, your role will encompass a diverse range of responsibilities aimed at mitigating technology-related risks:

• You will be involved in end-to-end technology risk engagements; working alongside team members from various functions to overlay point-of-views (POVs) and industry insights via research and analysis; and formulate solutions and recommendations to address clients’ needs, challenges and risks.
• Executing a variety of IT internal audit services for a diverse portfolio of clients, including IT risk assessments, IT governance, Data governance, IT security incident management, and compliance reviews against frameworks such as SOX, COBIT, ISO 27001, and NIST.
• Preparing clear, concise, and well-structured internal audit documentation, reports, and client deliverables that effectively communicate findings and recommendations to both technical and non-technical audiences.
• Support the assessment of technology risks and evaluate the design and operation of controls related to complex IT environments and systems against KPMG’s frameworks, regulatory and third-party frameworks; and assist in the development of risk-based IT internal audit programmes.
• Participate in the planning and execution of engagements; and close out engagements by producing high quality documentation and reports.
• Identify and communicate value-adding recommendations on technology risk and control management issues, as well as performance improvement opportunities for clients.
• Use advanced tools and technology to analyse and review data.
• Attend meetings with clients to define problem statements, analyse key priorities/issues; and collaborate with team members to conduct workshops, develop responses to client enquiries and ensure timely reporting.
• Assist the management team with business development activities, including formulating KPMG’s offerings and propositions, proposals, presentations and publications.
• Collaborate acrossglobal andadvisory teams in technology consulting, cyber security, internal audit, and deals advisory to deliver holistic solutions and POVs to clients.