Senior - IT Audit

Job Description

About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.

KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focussed and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.

Responsibilities

RESPONSIBILITIES

Perform testing of IT Application Controls/ITAC / Automated controls , IPE , and Interface Controls through code reviews, IT General Controls/ITGC/GITC review covering areas such as Change Management, Access Management, Backup Management, Incident and Problem Management, SDLC, Data Migration, Batch Job scheduling/monitoring and Business Continuity and Disaster Recovery
Perform Risk Assessment, identification, and Evaluation of Controls, prepare process flow diagrams and document the same in Risk & Control Matrix.
Perform business process walkthrough and controls testing for IT Audits .
Performing planning and executing audits, including - SOX, Internal Audits, External Audits, SOC1, SOC2, attestation.
Conducting controls assessment in manual/ automated environment
Prepare/Review of Policies, Procedures, SOPs
Maintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables.
Demonstrate a thorough understanding of complex information systems and apply it to client situations. Use extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the work to be performed.
Coordinate effectively and efficiently with the Engagement manager and the client management keeping both constantly updated regarding project's progress. Collaborate with other members of the engagement team to plan the engagement and develop relevant work papers/deliverables.
Perform fieldwork and share the daily progress of fieldwork, informing supervisors of engagement status.

Qualifications

MBA/Mtech/MS full time with minimum 3 year experience.
IT Audit + SAP experience with knowledge of IT governance practices
Prior IT Audit knowledge in areas of ITGC, ITAC (application/automated controls) SOX 404, SOC-1 and SOC-2 Audits
Good to have knowledge of other IT regulations, standards and benchmarks used by the IT industry (e.g. NIST, PCI-DSS, ITIL, OWASP, SOX, COBIT, SSAE
18/ISAE 3402 etc.)
Technical Knowledge of IT Audit Tools with excellent knowledge of IT Audit process and methodology
Exposure to Risk Management and Governance Frameworks/ Systems will be an added advantage
Exposure to ERP systems will be added advantage
Strong project management, communication (written and verbal) and presentation skills
Knowledge of security measures and auditing practices within various applications, operating systems, and databases.
Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance, and professionalism
Preferred Certifications – CISA/CISSP//CISM
Exposure to automation Data Analytics tools such as Qlik View/Qlik sense, ACL, Power BI will be an advantage
Proficiency with Microsoft Word, Excel, Visio, and other MS Office tools.

Equal Opportunity Employer KPMG India

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.