Senior Manager - Technology Risk Consulting

Overview

 

At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world.

The Opportunity

Our Technology Risk Consulting services team is growing and we are looking for a Senior Manager to join our team in Toronto. The Technology Risk Consulting practice provides a variety of services to our clients. The successful candidate will focus primarily on performing IT risk advisory and IT internal audit engagements, having a creative mindset to perform a broad variety of engagements. The candidate needs to be able to manage any type of IT risk-related engagement, working with specialists as needed. They will also be involved with the business development and training of our junior staff.

What you will do

• Conducting assessments of IT risks and controls in support of IT risk advisory and internal audit engagements, related to for instance:
  • IT risk and maturity assessment
  • Information security maturity and readiness per particular standards
  • IT projects and system implementations
  • Access management
  • IT governance reviews
  • IT third-party risk management
  • Business continuity and disaster recovery
  • Cloud security
  • Data governance assessments and reviews
• Managing engagements end-to-end, overseeing teams, and managing clients while simultaneously delivering various client engagements.
• Developing risk and control matrices and reviewing procedures.
• Engagement risk management: quality assurance through file review, engagement planning, development and monitoring, engagement profitability.
• Business development: taking a proactive role in the business community to increase awareness of the firm's services and level of commitment to the local market, developing and maturing relationships with internal staff and clients, developing proposals, identifying and pursuing opportunities to increase the practice's penetration in the public and private sector.
• Guiding field engagement teams as well as coaching and mentoring junior staff members.

What you bring to the role

• Bachelor’s or Master’s degree in Business, Information technology, Data Science, or Computer Science degree required.
• 8 or more years of relevant experience in assessing information technology or business process risk ideally within a large consulting practice.
• Experience with writing IT internal audit reports or advisory reports, including observations and recommendations, as well as presenting to leadership or audit committees.
• Strong understanding of IT risk/security standards (e.g., NIST CSF, ISO27001, SoGP, COBIT, etc.) and the overall business and audit risks.
• Ability to work as a self-starter as well as with little supervision and within a team environment.
• Excellent written and oral communication skills, able to effectively express insights.
• Demonstrated ability to learn and succeed in a fast-paced environment.
• Attention to detail and strong organization and investigative skills.