
Senior Associate, Security Governance Risk and Compliance (IT Audit)
at KPMG
Posted 7 hours ago
No clicks
- Compensation
- $82,200 – $168,200 USD
- City
- Not specified
- Country
- United States
Currency: $ (USD)
Join KPMG's Enterprise Security Services as a Senior Associate focused on Security Governance, Risk and Compliance (Audit). This remote role oversees high-level IT security and compliance audits (ISO 27001 and ISO 42001) and helps develop risk-based IT and security risk management plans. You will create and maintain audit workpapers, collect and evaluate control evidence, and collaborate with leadership to drive risk reduction. The position emphasizes integrity, professionalism, and building trust with peers and stakeholders in a professional services environment.
Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.
KPMG is currently seeking a Sr. Associate, Security Governance, Risk and Compliance (Audit) to join our Enterprise Security Services organization. This is a remote work opportunity team.
Responsibilities:
- Accountable for the execution of high-level compliance audits following the ISO 27001 and 42001 frameworks
- Apply a thorough knowledge of risk, compliance, information security and privacy to develop and execute a multi-disciplined IT and Security Risk Management implementation plan, with the ability to enable leadership to make informed, risk-based decisions across disparate categories of risk, such as stability, operations, cyber, information handling, physical security, resiliency
- Build and maintain trust-based relationships with peers and leaders; evaluate risk reduction and mitigation activities to continually drive towards risk reduction methodologies
- Tasked with the creation of Audit workpapers; their quality, timeliness, completeness and accuracy
- Responsible for the timely collection, evaluation, acceptance or rejection and feedback of control evidence and artifacts thereof
- Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
- Minimum three years of recent experience in IT audit within a large professional services environment
- Bachelor's degree from an accredited college or university is preferred; relevant industry certifications, such as CISA, CISM, CISSP, ISO 27001/42001 Lead Auditor are preferred
- Experience with ISO 27001 (Information Security and Privacy) and/or ISO42001 (Artificial Intelligence) evaluation of control, mitigating controls, identification of control deficiencies and facilitation of the remediation processes collaboration is preferred
- Detail oriented with strong verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork
- Ability to positively influence and be a credible source of knowledge to peers and other teams
- Familiarity with the Public Company Accounting Oversight Board (PCAOB), SOC 1/2/3, AICPA, ISO, COBIT, CSA, ITIL and other relative IT and Information Security Frameworks
- Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

