Assistant Manager - Information Security and Technology Risk Assessment

Assistant Manager - Info Sec and Tech Risk Assessments

Description

About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada. 

KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.

Key Responsibilities: IT General Controls (ITGC): Assess design and operating effectiveness of ITGCs across access management, change management, and IT operations. Identify control gaps and recommend remediation strategies. IT Application Controls (ITAC): Evaluate automated application controls (input, processing, output) across business-critical applications. Perform walkthroughs and testing to ensure compliance with audit and regulatory requirements. Control Testing: Execute SOX, SOC, and internal audit control testing procedures. Prepare detailed workpapers and communicate findings to stakeholders. Cyber Risk Assessment: Perform risk assessments on IT processes and systems to identify potential threats and control weaknesses. Recommend mitigation strategies aligned with organizational risk appetite. Required Skills: Strong understanding of IT governance frameworks (COBIT, NIST, ISO 27001). Experience in IT controls testing and risk assessment. Knowledge of cybersecurity principles and risk management (non-technical). Excellent analytical, documentation, and communication skills. 

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Certifications preferred: CISA, CISSP, CRISC, or equivalent.