* Minimum 6 years of information security and risk experience, including
minimum 4 years of experience in information protection controls assessments
and ISO 27001 information security controls auditing and /or implementing.

* Strong information security and privacy standards knowledge.

* Excellent information protection risk assessment planning, executing,
managing and reporting skills for internal audits as well as third party
supplier audits.

* Proven ability to operate as a risk-based Quality Assessment (QA) reviewer of
audits performed, applying independent judgment based on leading industry
practices. Demonstrated sound professional judgment to evaluate control
effectiveness in context, separating isolated procedural issues from matters
that present meaningful risk or systemic.

* Ability to assess contractual security obligations and map them to control
testing and evidence.

* Experience reviewing and interpreting independent certification and
attestation reports (e.g. ISO 27001, SOC 2).

* Understanding of risk‑based scoping approaches, including consideration of




supplier risk indicators and service context.

* ISO 27001:2022 lead auditor or lead implementer certification. ISO 42001 / AI
lead auditor or lead implementer a plus.

* Prior supplier security assessment experience preferred.

* Prior KPMG (or Big4) work experience a plus. Familiarity with KPMG policies
(e.g. Global InfoSec & Privacy Policies, GISP, GAUP) or governance frameworks
(e.g. IFDTA) a plus.

* Excellent written and verbal communication skills in English, including
strong report writing and the ability to present clearly and confidently to
senior stakeholders.

* Proficient in M365 tools (Word, PowerPoint, Excel, Teams, Copilot), with
strong capability to produce clear, high‑quality reports and presentations.

* Robust ability to multitask and work independently within a global team.
Proactive, can work with minimal supervision, and work on continuous
improvements.

* Accountable and

📌 Information Protection Assessments (Pune)
🏢 KPMG Delivery Network India 1
📍 Pune