
at KPMG
Big FourPosted 5 days ago
No clicks
**Senior Associate, Security Governance Risk and Compliance (IT Audit)** KPMG seeks a experienced **Senior Associate** for IT Audit, specializing in Security, Governance, Risk, and Compliance. The role involves executing high-level audits following ISO 27001 and 42001 frameworks. Duties include developing risk management plans, building trust-based relationships, and ensuring the quality and timeliness of audit workpapers. Applicants should have a bachelor's degree, CISA, CISM, or CISSP certification, and minimum three years of relevant IT audit experience in a large professional services environment. Strong communication, problem-solving, and analytical skills are essential. Proficiency in ISO 27001, 42001, PCAOB, SOC 1/2/3, AICPA, COBIT, CSA, and ITIL frameworks is preferred. The role is remote and requires U.S. work authorization.
- Compensation
- $90,400 – $168,200 USD
- City
- Los Angeles
- Country
- United States
Currency: $ (USD)
Full Job Description
Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.
KPMG is currently seeking a Sr. Associate, Security Governance, Risk and Compliance (Audit) to join our Enterprise Security Services organization. This is a remote work opportunity team.
Responsibilities:
- Accountable for the execution of high-level compliance audits following the ISO 27001 and 42001 frameworks
- Apply a thorough knowledge of risk, compliance, information security and privacy to develop and execute a multi-disciplined IT and Security Risk Management implementation plan, with the ability to enable leadership to make informed, risk-based decisions across disparate categories of risk, such as stability, operations, cyber, information handling, physical security, resiliency
- Build and maintain trust-based relationships with peers and leaders; evaluate risk reduction and mitigation activities to continually drive towards risk reduction methodologies
- Tasked with the creation of Audit workpapers; their quality, timeliness, completeness and accuracy
- Responsible for the timely collection, evaluation, acceptance or rejection and feedback of control evidence and artifacts thereof
- Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
- Minimum three years of recent experience in IT audit within a large professional services environment
- Bachelor's degree from an accredited college or university is preferred; relevant industry certifications, such as CISA, CISM, CISSP, ISO 27001/42001 Lead Auditor are preferred
- Experience with ISO 27001 (Information Security and Privacy) and/or ISO42001 (Artificial Intelligence) evaluation of control, mitigating controls, identification of control deficiencies and facilitation of the remediation processes collaboration is preferred
- Detail oriented with strong verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork
- Ability to positively influence and be a credible source of knowledge to peers and other teams
- Familiarity with the Public Company Accounting Oversight Board (PCAOB), SOC 1/2/3, AICPA, ISO, COBIT, CSA, ITIL and other relative IT and Information Security Frameworks
- Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)




