Senior Consultant / Consultant, Technology Risk, Technology Consulting

KPMG China provides multidisciplinary services from audit and tax to advisory, with a strong focus on serving our clients' needs and their industries. Not only do we have an overriding commitment to provide the highest quality services for our clients, but we also strive to become a responsible corporate citizen that has a positive impact on our environment and community. At KPMG, you'll translate insights into action and reveal opportunities for all-our teams, our clients and our world.

Service Line Overview

At KPMG's Consulting practice, we do not limit ourselves to either strategy or implementation. We deliver both. Our Hong Kong division is the fastest growing within KPMG China and represents a young and enthusiastic team that always pushes for success. Since our inception, we have acquired in-depth knowledge of an incredibly broad range of sectors and services.

KPMG's Technology Risk team focus on the use of technology by our clients and help 1st , 2nd and 3rd line of defense in navigating the relevant technology risk and compliance matters in a strategic and tactical manner. Our professionals do this by leveraging our strong industry, IT control and technology focus and experience; deploying leading methodologies and tools; applying our objectivity; using a balanced approach to growth and risk; utilizing our comprehensive global breadth and local knowledge; and calling upon our deep understanding of relevant business, financial, and regulatory inter-dependencies.

KPMG is currently seeking both Senior Consultants and Consultants to join the team

Key Responsibilities

• Assist in planning activities, development of audit program, and execution of IT-related audits and risk assessments in the following areas: cybersecurity, IT strategy and governance, IT operations, business continuity and disaster recovery, network and infrastructure security, cloud and third party risk, programs and projects, automation, GITCs and application controls, and regulatory/compliance requirements
• Review clients' processes and controls against leading practice and industry frameworks, identify gaps in design and execution, and communicate issues and recommendations to engagement leads and client management
• Work with client management team to assist in implementation of new processes and controls to address key risks, as necessary
• Draft comprehensive executive summaries and final reports for delivery to client senior management and document and review engagement workpapers in accordance with standard KPMG and industry-accepted methodologies
• Assist in kickoff, status, and closing meetings with engagement team and client and contribute to technology risk knowledge base and internal practice development initiatives

Additional Responsibilities For Senior Consultant

• Plan and execute IT-related audit engagements and risk assessments with a focus on strategic, operational and regulatory/compliance related risks
• Lead kickoff, status, and closing meetings with engagement team and client and contribute to technology risk knowledge base and internal practice development initiatives
• Supervise consultants on engagements

Experience & Background

• Minimum of one year of experience working within an internal audit, IT risk or IT compliance function as an internal employee or as part of a professional services firm
• Bachelor's degree from an accredited college/university or equivalent work experience; CISA, PMP, CISSP or CRISC certification is preferred
• Familiarity leading and executing risk-based IT-related internal audits and/or risk and control assessments, leveraging IT governance and control frameworks such as COBIT, NIST CSF, NIST 800-53, and ITIL
• Experience in implementation of internal control processes and programs for IT
• Proficiency in executing projects in accordance with leading practice project management principles
• Strong leadership and communication skills, technical knowledge, and the ability to write at a publication quality level in order to communicate findings and recommendations to the clients and senior management team

Additional Qualifications for Senior Consultant

• Minimum of three years of experience working within an internal audit, IT risk or IT compliance function as an internal employee or as part of a professional services firm
• Experience leading and executing risk-based IT-related internal audits and/or risk and control assessments, leveraging IT governance and control frameworks such as COBIT, NIST CSF, NIST 800-53, and ITIL

About KPMG

At KPMG China, we are committed to being an equal opportunity employer, with zero tolerance for any form of discrimination against any persons. It is important for us to create an inclusive, diverse and agile workplace for our people to develop and thrive at both a personal and professional level.

We strive to make ESG (environmental, social and governance) a watermark running through our organisation; from empowering our people to become agents of positive change, to providing better solutions and services to our clients. To lead by example, we launched Our Impact Plan (OIP) which includes our ESG commitments and progress across four key pillars - Planet, People, Prosperity and Governance.

We encourage you to come as you are, and we welcome all qualified candidates to apply, and hope you unlock opportunities with us. Visit KPMG China website for more company information.

Please note that all information in this form has been voluntarily supplied and will be used by KPMG for selection purposed only.