IT Audit - Manager

Technology Risk Team Manager – Position Overview

Position Overview

The Manager position within the Technology Risk Team carries the responsibility for overseeing daily operations, ensuring quality control, and executing multiple projects efficiently and within set timelines. The scope of work encompasses IT General Controls, IT Application Controls, and IT Audits. As a leader, the Manager will be accountable for managing projects end-to-end, starting from initial planning through to delivery and final reporting.

Additionally, the role requires engagement with new countries and clients, where the Manager will introduce and educate stakeholders about KDN’s capabilities and delivery model, facilitating the integration of KDN into their environments. This will necessitate regular interactions with senior stakeholders.

Success in this position hinges on agility, the ability to lead complex projects, active client and stakeholder engagement, and support for business development activities, such as preparing proposals and developing solutions.

Roles & Responsibilities

• Lead the design and execution of daily activities across Information Technology (IT) audit engagements, focusing on IT risks and the broader IT landscape.
• Plan activities related to the development of audit programmes, as well as the execution of internal audits and IT control assessments.
• Review client processes and controls against leading practices and industry frameworks, identify gaps in design and execution, and communicate issues and recommendations to engagement leads and client management.
• Provide oversight and leadership to KPMG team members regarding deliverables, project plans, and performance management.
• Support business development by drafting proposals, conceptualising and articulating solutions (integrating KDN), and estimating time and costs.
• Engage with new countries and stakeholders, educating them on KDN’s capabilities and delivery model.
• Develop materials for client or internal initiatives, such as case studies and thought leadership content.

Candidate Requirements

Educational Qualifications

BE, B-Tech, MCA, BSc-IT, or MBA

Certifications

CISA, CRISC, CISSP, CCSK, or similar certifications

Mandatory Technical & Functional Skills

• Thorough understanding of security measures and auditing practices across various operating systems, databases, and applications.
• Experience in risk assessment across diverse business processes.
• Proven ability to identify control gaps and effectively communicate audit findings and recommendations for control redesign to senior management and clients.
• Hands-on experience working with IT General Controls, IT Application Controls, IT Internal Audits, and IT Risk Assessments.
• Practical experience with SAP/Oracle Control Assurance, including testing of SAP/Oracle IT General Controls and IT Application Controls.
• Previous experience leading IT Audit engagements.
• Exposure to Identity and Access Management, including user management, authentication, and authorisation.
• Demonstrated team leadership experience and performance management in current or previous roles.
• Technical skills in evaluating the design and operational effectiveness of technology controls across various IT platforms, including ERP suites, Windows, Unix/Linux, iSeries, Oracle database, DB2, and SQL.
• Experience supporting proposal development and solutioning.
• Solid experience in stakeholder engagement and presentation.

Attributes and Other Requirements

• Excellent stakeholder management skills, with prior experience working with clients and stakeholders across geographies.
• Ability to operate independently as well as collaborate with team members.
• Capacity to multitask, adapt to dynamic environments, and manage changing priorities.

Other Information

• Interview process: Candidates should expect 3-4 rounds of interviews.
• Does the job role involve travelling: No
• Does the busy season apply to this role?: The seasonality of the work depends on the timelines of projects and deliverables.