Senior Associate, Security Governance, Risk and Compliance (IPCR / ISO)
Join KPMG US to apply for the Senior Associate, Security Governance, Risk and Compliance (IPCR / ISO) role.
This is a remote work opportunity.
Responsibilities
- Responsible for the execution of high-level compliance audits following the ISO 27001 and 42001 framework.
- Apply a thorough knowledge of risk, compliance, information security and privacy to develop and execute a multi-disciplined IT and Security Risk Management implementation plan, enabling leadership to make informed, risk-based decisions across disparate categories of risk such as stability, operations, cyber, information handling, physical security and resiliency.
- Build and maintain trust-based relationships with peers and leaders; evaluate risk reduction and mitigation activities to continually drive towards risk reduction methodologies, analyze the impacts of key risks, define criteria for risk tradeoffs and make recommendations to leadership to minimize overall risk posture; defend KPMG security design and effectiveness capabilities to external entities as needed.
- Evaluate the changing operating landscape and determine its impact on organizational risks, obligations and external expectations. Recommend changes to risk approach to ensure consistency with current IT and security best practices.
- Oversee work products and lead small to medium size projects, managing deadlines, expectations and supervising the work performed by more junior staff; provide coaching, mentoring and feedback to such individuals and serve as an informal performance manager of a team of junior employees.
- Thoroughly review audit workpapers for quality, timeliness, completeness and accuracy; handle escalation requests for control evidence from identified control owners / operators and manage the timely collection, evaluation, acceptance or rejection and feedback of control evidence and associated artifacts.
- Act with integrity, professionalism and personal responsibility to uphold KPMG's respectful and courteous work environment.
Qualifications
Minimum three years of recent experience in information technology (IT) audit within a large professional services environment (Big Four).Bachelor's degree from an accredited college or university is preferred; a minimum of a high school diploma or GED is required. Relevant industry certifications such as CISA, CISM, CISSP, ISO 27001 / 42001 Lead Auditor are preferred.Experience with ISO 27001 (Information Security and Privacy) and ISO 42001 (Artificial Intelligence) evaluation of control, mitigating controls, identification of control deficiencies and facilitation of remediation processes is preferred.Detail-oriented with strong verbal and written communication, problem-solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork, along with the ability to positively influence and be a credible source of knowledge to peers and other teams.Familiarity with the Public Company Accounting Oversight Board (PCAOB), SOC 1 / 2 / 3, AICPA, ISO, COBIT, CSA, ITIL and other related IT and Information Security Frameworks.Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.KPMG is an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state and local laws.
#J-18808-Ljbffr