We are recruiting for a Senior in the Internal Audit & Controls Team under Managed Services. Working as a Senior in this team, your responsibilities will include:

Key Responsibilities
• Perform end-to-end control testing across domain like cyber and privacy controls
• Conduct walkthroughs, identify control attributes, and assess control design and operational effectiveness
• Review evidence, document test results, and identify control deficiencies or gaps
• Support development and maintenance of Risk and Control Matrices (RACMs)
• Collaborate with engagement teams and stakeholders to drive timely completion of testing deliverables
• Ensure documentation meets audit and quality standards Additional skillset needed
• Demonstrate working knowledge of cybersecurity and privacy domains such as:
• Identity & Access Management
• Data Protection
• Network Security
• Logging & Monitoring
• Apply understanding of NIST Cybersecurity Framework (CSF) to map and assess controls
• Understanding of COBIT, GDPR governance and ISO27001.
• Experience with applications/ tools like CyberArk, Sailpoint, Github, AWS and GCP.
• Support cyber maturity assessments and control benchmarking where required Responsibilities We are recruiting for a Senior in the Internal Audit & Controls Team under Managed Services. Working as a Senior in this team, your responsibilities will include:

Key Responsibilities
• Perform end-to-end control testing across domain like cyber and privacy controls
• Conduct walkthroughs, identify control attributes, and assess control design and operational effectiveness
• Review evidence, document test results,



and identify control deficiencies or gaps
• Support development and maintenance of Risk and Control Matrices (RACMs)
• Collaborate with engagement teams and stakeholders to drive timely completion of testing deliverables
• Ensure documentation meets audit and quality standards Additional skillset needed
• Demonstrate working knowledge of cybersecurity and privacy domains such as:
• Identity & Access Management
• Data Protection
• Network Security
• Logging & Monitoring
• Apply understanding of NIST Cybersecurity Framework (CSF) to map and assess controls
• Understanding of COBIT, GDPR governance and ISO27001.
• Experience with applications/ tools like CyberArk, Sailpoint, Github, AWS and GCP.
• Support cyber maturity assessments and control benchmarking where required Qualifications Required Skillset Core Skills (Mandatory)
• Strong experience in IT Audit / Technology Risk / Control Testing
• Hands-on experience in:
• ITGC testing (Access, Change Management, Operations)
• Control documentation and evaluation
• Good understanding of control testing lifecycle (design and operating effectiveness)
• Familiarity with audit tools, documentation standards, and testing methodologies Cybersecurity (Preferred / Secondary)
• Working knowledge of NIST Cybersecurity Framework
• Basic exposure to cybersecurity control domains and risk concepts
• Understanding of frameworks like ISO 27001, COBIT (good to have) Qualifications
• Bachelor’s degree in Technology / Engineering / Commerce or related field
• Skilled certifications (preferred but not mandatory):
• CISA, CISSP, ISO 27001 LA, or equivalent

📌 Senior - IT Controls (Bengaluru)
🏢 KPMG India
📍 Bengaluru