Senior - IT Controls
KPMG Global Services (KGS) · Consulting & Professional Services
- Bangalore, Karnataka, India
- On-site
- Posted today
- Apply by 15 Nov
- IT & Infrastructure
About the job
We are recruiting for a Senior in the Internal Audit & Controls Team under Managed Services. Working as a Senior in this team, your responsibilities will include:
Key Responsibilities
Perform end-to-end control testing across domain like cyber and privacy controls
Conduct walkthroughs, identify control attributes, and assess control design and operational effectiveness
Review evidence, document test results, and identify control deficiencies or gaps
Support development and maintenance of Risk and Control Matrices (RACMs)
Collaborate with engagement teams and stakeholders to drive timely completion of testing deliverables
Ensure documentation meets audit and quality standards
Additional skillset needed
Demonstrate working knowledge of cybersecurity and privacy domains such as:
Identity & Access Management
Data Protection
Network Security
Logging & Monitoring
Apply understanding of NIST Cybersecurity Framework (CSF) to map and assess controls
Understanding of COBIT, GDPR governance and ISO27001.
Experience with applications/ tools like CyberArk, Sailpoint, Github, AWS and GCP.
Support cyber maturity assessments and control benchmarking where required
We are recruiting for a Senior in the Internal Audit & Controls Team under Managed Services. Working as a Senior in this team, your responsibilities will include:
Key Responsibilities
Perform end-to-end control testing across domain like cyber and privacy controls
Conduct walkthroughs, identify control attributes, and assess control design and operational effectiveness
Review evidence, document test results, and identify control deficiencies or gaps
Support development and maintenance of Risk and Control Matrices (RACMs)
Collaborate with engagement teams and stakeholders to drive timely completion of testing deliverables
Ensure documentation meets audit and quality standards
Additional skillset needed
Demonstrate working knowledge of cybersecurity and privacy domains such as:
Identity & Access Management
Data Protection
Network Security
Logging & Monitoring
Apply understanding of NIST Cybersecurity Framework (CSF) to map and assess controls
Understanding of COBIT, GDPR governance and ISO27001.
Experience with applications/ tools like CyberArk, Sailpoint, Github, AWS and GCP.
Support cyber maturity assessments and control benchmarking where required
Required Skillset
Core Skills (Mandatory)
Strong experience in IT Audit / Technology Risk / Control Testing
Hands-on experience in:
ITGC testing (Access, Change Management, Operations)
Control documentation and evaluation
Good understanding of control testing lifecycle (design and operating effectiveness)
Familiarity with audit tools, documentation standards, and testing methodologies
Cybersecurity (Preferred / Secondary)
Working knowledge of NIST Cybersecurity Framework
Basic exposure to cybersecurity control domains and risk concepts
Understanding of frameworks like ISO 27001, COBIT (good to have)
Qualifications
Bachelor’s degree in Technology / Engineering / Commerce or related field
Professional certifications (preferred but not mandatory):
CISA, CISSP, ISO 27001 LA, or equivalent