IT Advisory Risk Consulting – IT Audit & AssuranceKPMG’s IT Advisory – Risk Consulting team is looking for Associate Consultants/ Consultants/ Assistant Managers to join their IT Audit & Assurance team in Bengaluru. Team provides Independent assurance on controls in place across client’s IT environment and ways to mitigate Technology risks.Following are some of our key solution offerings•Application/Infrastructure Risk assessments• Risk Based IT Internal Audit• IT SOX 404 Controls Testing, Quality Assurance• Internal Financial Controls related to IT General Controls• IT General Controls as part of Financial Statements Audits• IT Risk & Control Self-Assessment• Business Systems Controls / IT Application Controls• Auditing Emerging Technologies such as Cloud Security, Intelligent Automation, RPA, IoT etc.• IT Attestation (SOC1/SOC2/ISAE 3402, ISAE 3000 etc.)• Third Party/Vendor Risk AssessmentsPosition: Consultants/ Assistant ManagersLocation: BengaluruResponsibilitiesIndustry Experience:• Plan, budget and execute the day-to-day activities of infrastructure audit engagements for clients• Assess client's security landscape, assess, evaluate and recommend most suitable security solution, tools & techniques to create a threat resilient landscape using KPMG differentiated approach and methodologies. Provide security concept, framework & standards for development & support client teams for the solution design, customization build and roll out to end users.• Perform a holistic security risk assessment of the client’s IT landscape taking various assets, threats, vulnerabilities, business impact & legal aspects into consideration. Designing and implementing controls to mitigate identified risks by lucid communication to client stakeholders. Effective persuasive/convincing abilities while communicating gaps detected during audits, risk assessments, attestation engagements.• Collaborate with other practice groups to review the effects of new threats and vulnerabilities in the security space to assess, remediate, test and protect client application artefacts, data and enterprise ecosystems from threat vectors as they emerge.