IT Internal Audit, Senior Associate / Associate Manager

Technology Risk Consultant

Technology Risk is a specialized field within technology consulting focused on identifying, assessing, and mitigating risks associated with an organization’s technology landscape. In today’s highly digitized world, businesses rely on technology to drive innovation, improve operational efficiency, and deliver seamless customer experiences. With this reliance comes a rise in risks, including cyber threats, data breaches, system failures, regulatory non-compliance, and operational disruptions.

As part of the Technology Risk practice, you will collaborate with a dynamic team of experienced consultants and engage with clients across different sectors to address technology risk challenges and implement robust risk management strategies. This role offers extensive learning opportunities, exposure to diverse projects across different geographical locations and emerging technologies, and the chance to help shape the risk landscape for clients while supporting their navigation of the digital landscape.

What You Will Do

As a Technology Risk Consultant, your responsibilities will include:

• Participate in end-to-end technology risk engagements, collaborating with team members across functions to develop point-of-view (POV) insights through research and analysis, and formulate recommendations to address clients’ needs, challenges, and risks.
• Execute IT internal audit services for a diverse portfolio of clients, including IT risk assessments, IT governance, data governance, IT security incident management, and compliance reviews against frameworks such as SOX, COBIT, ISO 27001, and NIST.
• Prepare clear, concise, and well-structured internal audit documentation, reports, and client deliverables for technical and non-technical audiences.
• Support the assessment of technology risks and evaluate the design and operating effectiveness of controls in complex IT environments and systems against KPMG’s frameworks, regulatory requirements, and third-party frameworks; assist with the development of risk-based IT internal audit programs.
• Plan and execute engagements, and close out engagements by producing high-quality documentation and reports.
• Identify and communicate value-adding recommendations related to technology risk and control management issues, as well as opportunities for performance improvement.
• Use advanced tools and technology to analyze and review data.
• Attend client meetings to define problem statements, analyze key priorities and issues, and collaborate with team members to run workshops, develop responses to client enquiries, and support timely reporting.
• Support management with business development activities, including formulating offerings and propositions, and developing proposals, presentations, and publications.
• Collaborate across global and advisory teams in technology consulting, cyber security, internal audit, and deals advisory to deliver holistic solutions and POVs.

Who You Are

• Hold recognized tertiary qualifications in Computer Science, Information Technology, Information Systems, Computer Engineering, Accountancy/Commerce/Business, or a related discipline.
• Have 1 to 2 years of first-hand experience in IT audit/assurance or IT advisory; experience in areas such as IT Risk and Compliance, IT Governance, IT Internal Controls, or IT Audit will be advantageous.
• Have hands-on experience with data analytics tools and technologies, such as Python, Power BI, SQL, or ACL Analytics.
• Certifications such as CISA, CISSP, CCSP, or equivalent will be advantageous.
• Have good knowledge of the system development lifecycle, information security, and IT management, with the ability to quickly learn emerging methodologies, technologies, and new skills.
• Be self-motivated with an inquisitive, innovative, and resourceful mindset, able to work under pressure with changing priorities.
• Have strong analytical and problem-solving skills, and demonstrate interpersonal, organizational, presentation, and report-writing abilities with attention to detail.