Business Operations

Job description

About KPMG International

KPMG is a global organization of independent professional services firms providing Audit, Tax and Advisory services. KPMG is the brand under which the member firms of KPMG International Limited ("KPMG International") operate and provide professional services. "KPMG" is used to refer to individual member firms within the KPMG organization or to one or more member firms collectively. KPMG firms operate in 145 countries and territories with more than 236,000 partners and employees working in member firms around the world. Each KPMG firm is a legally distinct and separate entity and describes itself as such. Each KPMG member firm is responsible for its own obligations and liabilities. KPMG International Limited is a private English company limited by guarantee. KPMG International Limited and its related entities do not provide services to clients. For more detail about our structure, please visit

More than 2,500 talented colleagues make up the KPMG International team, with a focus on ensuring global consistency and providing expertise to support member firms in the achievement of KPMG's Trust and Growth ambition. KPMG International is comprised of a number of high-performing global teams, including: Global Advisory, Global Audit, Global Clients & Markets, Global Corporate Affairs, Global People, Global Quality and Risk Management, Global Tax & Legal, Global Technology and Knowledge, the International Office of General Counsel, and the Office of Chief Administrative Officer. Working together, the global team is changing the way business operates at KPMG, delivering value to KPMG firms and driving positive change in the communities in which KPMG International and KPMG firms operate.

About the team

The GT&K Technology Assurance Managmnt (TAM) Team at KPMG International Services Limited is looking for a dynamic candidate to fill the "Maternity Cover - Senior Manager- Operations, Technology Assurance Management" role for 14 months. This position offers great learning, delivery and relationship building opportunities across the organization. The team is close-knit with members working together on several high profile assurance management initiatives, enabling a great environment for collaboration. The team adopts intelligent working methods.

Role summary

Key responsibilities include:
• Overall: Managing multiple information protection audits of global technology services on the cloud and leading the service operations
• Strategy, Framework and Roadmap: Maintains a consistent and efficient information protection audit management framework and updates strategy based on changing landscape and stakeholder feedback. Communicates and trains other resources on the framework and leads delivery against established key performance indicators (short-term and long-term).
• Day to day oversight: Oversees activities to ensure that audits are planned in advance, considering scope overlaps, stakeholder outreach and resource limitations, and managed according to procedures. Oversees and reviews deliverables developed by the SOC 2 Attestation Manager and the PM.
• Accountable for high quality service deliverables.
• Executive reporting : Presents executive reports and communicates potential risks resourcefully early on to senior management.
• Trends Analysis: Identifies trends and proposes robust solutions for challenges. Identifies themes in information protection audit observations and suggests solutions to efficiently address based on industry experience, leading practices and global technology group context.
• Collaborates with other KPMGI teams, advising on suitable approach for auditable information protection practices and audit success, while ensuring minimum burden on business as usual activities.

Key accountabilities

Maintains consistent and efficient information protection audit management framework and service Auditees and Assurance Coordinators on the framework process and procedures and leads delivery against established key performance indicators (short-term and long-term). Oversees activities to ensure that audits are planned in advance, considering scope overlaps, stakeholder outreach and resource limitations, and managed according to procedures. Accountable for high quality service deliverables.Identifies trends and proposes robust solutions for challenges. Presents executive reports and communicates potential risks early on to management.Identifies themes in information protection audit observations and suggests solutions to efficiently address based on industry experience, leading practices and global technology group context.Manages standardization and oversight of multiple audits including SOC 2, ISO and ISQM-1 complianceCollaborates with Business Auditees, Controls Testing Teams, Assurance Coordinators and other teams across global technology groups that undergo information protection audits, advising on suitable approach for auditable information protection practices and audit success, while ensuring minimum burden on business as usual activities.

Experience & knowledge

• Minimum 8 years of experience, out of which minimum 5 years in information protection, including leading and / or managing information protection controls assessments, such as those based on ISO27001, ISO27017 and SSAE18 / System and Organization Control 2 / SOC2 for cloud platforms (internal and / or external assessments).
• Strong experience of senior stakeholder management (including ability to efficiently articulate challenges), ability to apply forward thinking mindset, develop service strategy and understand business impact.
• Strong cloud information protection audit experience that includes scoping, planning, performing, managing, reporting and remediation monitoring activities.
• Program and project management skills and experience. Proven track record of leading multiple projects or programs, through the management of teams of cross-discipline specialist.
• Demonstrable track record in assurance management in a senior internal position and/ or client facing delivery of assurance engagements"

Technical skills, abilities & qualifications

• Working knowledge of SOC 2 Attestations and relevant international standards such as ISQM-1
• Information security auditing experience and certifications a big plus, such as CISA or Certified ISO 27001 Lead Auditor.
• Ability to multi-task, adapt strategy based on competing priorities and work independently within a global team. High quality results delivery with attention to detail.
• Possess excellent business writing, reporting, presentation and communication skills in English.
• Holds a valid passport. Travelling may be required occasionally but will be planned and agreed in advance.

Intelligent Working

At KPMG International, we are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss individual requirements and our range of flexible working arrangements could be of interest. Please ask to find out more.

KPMG International's commitment to inclusion & diversity

At KPMG International, we recognise that we need inclusion and diversity to be successful. We want to attract, retain and develop diverse talent at all levels. This means recruiting from the widest pool of talent across our network and beyond, removing barriers that can prevent our people from reaching their full potential, and fostering a fully inclusive environment which empowers everyone to bring their whole selves to work.

Applying with a disability

KPMG International is proud to be an inclusive place to work and we are committed to ensuring that you are treated fairly throughout our recruitment process. Should you be successful after the initial application stage, please discuss any reasonable adjustments that you may require with your recruitment contact.

---