All open jobs
KPMG Global Services

Senior - IT Controls

Bangalore, Karnataka, India · full-time
Company's own boardBachelor's degree

Posted yesterday · First seen Oct 27 · seen live today · from KPMG Global Services's own Oracle Cloud board

Skills mentioned

aws

The posting, as published

We are recruiting for a Senior in the Internal Audit & Controls Team under Managed Services. Working as a Senior in this team, your responsibilities will include: Key Responsibilities Perform end-to-end control testing across domain like cyber and privacy controls Conduct walkthroughs, identify control attributes, and assess control design and operational effectiveness Review evidence, document test results, and identify control deficiencies or gaps Support development and maintenance of Risk and Control Matrices (RACMs) Collaborate with engagement teams and stakeholders to drive timely completion of testing deliverables Ensure documentation meets audit and quality standards Additional skillset needed Demonstrate working knowledge of cybersecurity and privacy domains such as: Identity & Access Management Data Protection Network Security Logging & Monitoring Apply understanding of NIST Cybersecurity Framework (CSF) to map and assess controls Understanding of COBIT, GDPR governance and ISO27001. Experience with applications/ tools like CyberArk, Sailpoint, Github, AWS and GCP. Support cyber maturity assessments and control benchmarking where required We are recruiting for a Senior in the Internal Audit & Controls Team under Managed Services. Working as a Senior in this team, your responsibilities will include: Key Responsibilities Perform end-to-end control testing across domain like cyber and privacy controls Conduct walkthroughs, identify control attributes, and assess control design and operational effectiveness Review evidence, document test results, and identify control deficiencies or gaps Support development and maintenance of Risk and Control Matrices (RACMs) Collaborate with engagement teams and stakeholders to drive timely completion of testing deliverables Ensure documentation meets audit and quality standards Additional skillset needed Demonstrate working knowledge of cybersecurity and privacy domains such as: Identity & Access Management Data Protection Network Security Logging & Monitoring Apply understanding of NIST Cybersecurity Framework (CSF) to map and assess controls Understanding of COBIT, GDPR governance and ISO27001. Experience with applications/ tools like CyberArk, Sailpoint, Github, AWS and GCP. Support cyber maturity assessments and control benchmarking where required Required Skillset Core Skills (Mandatory) Strong experience in IT Audit / Technology Risk / Control Testing Hands-on experience in: ITGC testing (Access, Change Management, Operations) Control documentation and evaluation Good understanding of control testing lifecycle (design and operating effectiveness) Familiarity with audit tools, documentation standards, and testing methodologies Cybersecurity (Preferred / Secondary) Working knowledge of NIST Cybersecurity Framework Basic exposure to cybersecurity control domains and risk concepts Understanding of frameworks like ISO 27001, COBIT (good to have) Qualifications Bachelor’s degree in Technology / Engineering / Commerce or related field Professional certifications (preferred but not mandatory): CISA, CISSP, ISO 27001 LA, or equivalent

Similar open roles