Consultant, IT Audit

About KPMG China

KPMG China provides multidisciplinary services from audit and tax to advisory, with a strong focus on serving our clients’ needs and their industries. We are committed to providing the highest quality services and striving to be a responsible corporate citizen. At KPMG, you’ll translate insights into action, revealing opportunities for our teams, clients, and the world.

The Role: Consultant, IT Audit

As a Consultant, IT Audit, you will assist engagement teams in understanding and assessing IT-related risks affecting audits. This involves evaluating IT control environments over financial reporting applications and platforms, then developing an audit approach to mitigate the risk of material misstatement due to IT risks. Our professionals leverage industry expertise, IT control knowledge, leading methodologies, and a deep understanding of business, financial, and regulatory inter-dependencies.

This client-focused role involves planning, supervising, and delivering IT audit and assurance-based engagements with a strong emphasis on audit quality. You will manage the entire engagement lifecycle, including execution, report writing, client communication, and coaching junior staff. Operational accountability for the quality of information technology audit assistance work is also a key responsibility.

Key Responsibilities

• Plan and execute daily IT audit and assurance engagements, prioritizing audit quality and innovation.
• Support Engagement Managers with scoping, financial oversight, risk management activities, and communicating IT audit findings.
• Utilize appropriate IRM technology tools for audit documentation and completion.
• Assist in scoping, financial management, delivery risk management, and initial review of deliverables.
• Conduct fieldwork and lead small project teams to deliver valuable assurance services to clients.
• Identify and effectively communicate IT audit findings to senior management and clients.
• Help identify and propose performance improvement opportunities for assigned clients.
• Complete tasks and deliverables to high-quality standards, adhering to agreed plans and budgets.

Experience & Background

• Minimum one year of experience in internal or external IT audit, risk assessment, or business process reengineering.
• Proven track record of successfully delivering IT audit and assurance services, including external/internal audits, preferably within a Big Four firm.
• Experience in business analysis and a solid understanding of core business processes within various industry sectors.
• Familiarity with systems environments across different industry sectors.
• Possession of a recognized relevant qualification (e.g., CISA or HKICPA).
• Bachelor’s or Master’s degree in an appropriate field from an accredited college/university.
• Excellent written and verbal communication skills in English and Chinese (Mandarin or Cantonese), alongside exceptional interpersonal skills to build rapport with senior executives.
• Ability to identify, assess, and relate complex IT risks and controls to the broader business environment.
• Excellent reporting and presentation skills, with the ability to articulate opinions clearly.
• Proven capability to deliver high-quality work within tight timelines and budget constraints.
• Strong teamwork ability, complemented by the capacity to work effectively independently.

Key skills/competency

• IT Audit
• Risk Management
• Financial Reporting
• IT Controls
• Assurance Services
• Engagement Management
• Client Communication
• Reporting Skills
• Team Leadership
• Audit Quality