Senior Associate, IT Internal Audit

KPMG is currently seeking a Senior Associate, IT Internal Audit to join our Internal Audit & Controls practice.

• Design, coordinate, and oversee day‑to‑day activities related to client engagements in areas such as IT strategy and transformation programs, agile software development/Dev Ops, business continuity and disaster recovery, cybersecurity, cloud providers, third parties, data management/governance, emerging technology (AI, automation), application controls testing, and regulatory/compliance requirements such as SOX, FedRAMP, PCI. Review clients’ IT processes and tools for security, resiliency, and Dev Ops controls against leading practice frameworks;
  
  assess maturity, identify gaps, and communicate issues and recommendations to senior management.
• Work with client senior management to design and implement new IT risk and control frameworks, sustainable solutions, operating processes and people models to address key and evolving risks.
• Complete comprehensive executive summaries, final reports and deliver them to client senior management; document and review engagement work papers per KPMG requirements and industry best practices. Lead efforts in developing and contributing content to KPMG knowledge bases, research, thought leadership, marketing collateral, and peer‑exchange materials.

• Minimum three years of recent experience in IT risk (first or second line), cybersecurity, internal audit or IT compliance function as an internal employee, or similar role in a professional services firm.
• Bachelor’s degree in an appropriate field; CISA, CISM, CISSP, CRISC or similar certifications preferred.
• Master’s degree preferred; one or more enterprise technology vendor certifications from IBM, Oracle, Microsoft, Google, AWS, Service Now, Git Hub, Atlassian, or Git Lab preferred.
• Prior knowledge leading and executing IT risk consulting, process re‑engineering, audit, and internal controls engagements, leveraging frameworks such as COBIT, NIST CSF, NIST 800‑53, IIA GTAG, Cloud Security Alliance, CMMI, ITIL and proficiency in SOX internal control programs.
• Experience with IT risk management operating models, three‑lines‑of‑defense frameworks, integrated risk management practices, and/or risk intelligence capabilities.
• Understanding of enterprise technology infrastructures, CI‑CD pipelines, and Dev Ops tools from IBM, Oracle, Microsoft, Google, AWS, Service Now, Jenkins, Git Hub, Artifactory, Atlassian, or Git Lab.
• Strong leadership and executive communication skills, technical knowledge, and writing at publication quality level to communicate findings to clients and senior management.
• Authorized to work in the U.S. without need for employment‑based visa sponsorship; ability to travel as necessary.

Benefits include medical, dental, vision, disability and life insurance, 401(k) plans, and well‑being benefits. Personal time off, holiday calendar, and paid breaks are provided. Salary ranges for California: $95,095 – $161,000.

KPMG is an equal‑opportunity employer. KPMG complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.

Los Angeles County applicants:
Material job duties for this position are listed above. Criminal history may have a relationship with some duties. We will consider qualified applicants with arrest and conviction records under the Fair Chance Ordinances.