Attestation Manager in Bristol

Technology Assurance Management services focus on management of certification, attestation and independent testing audits of global technology systems and services on the cloud, and alignment of efforts and efficiencies. Efficient and effective information protection audits provide required assurance for and permission to operate key KPMG technology solutions supporting client service delivery.

Responsibilities

• Plan for and coordinate multiple Service and Organization Controls (SOC) 2 readiness assessment and examination streams for several business and technology areas, coordinate auditor and key stakeholder meetings, gather requested evidence, track and report on progress and provide updates to stakeholders.
• Work closely with technology and business stakeholders to clarify compliance requirements and drive implementation of process improvements, provide leading practice and current guidance to control owners, assist in ensuring that controls are appropriately designed and effective and formally documented following global policies.
• Prepare executive management reporting on SOC2 efforts status, support the management of project risks.
• Identify methods to leverage testing for several certification, internal audit and attestation purposes and efficiently coordinate relevant activities.
• Oversee activities to ensure that audits are planned in advance, considering scope overlaps, stakeholder outreach and resource limitations, and managed according to procedures. Develops and implements PMO processes.
• Identify trends and propose robust solutions for challenges. Identify themes in information protection audit observations and suggest solutions to efficiently address based on industry experience, leading practices and global technology group context.
• Collaborate with other KPMGI/ GT&K teams, advising on suitable approach for auditable information protection practices and audit success, while ensuring minimum burden on business as usual activities.
• Proven experience in information protection, including leading and/or managing information protection controls assessments, such as those based on ISO27001, ISO27017 and SSAE18 / SOC 2 for cloud platforms (internal and/or external assessments).
• Program and project management skills and experience. Proven track record of leading multiple projects or programs, through the management of teams of cross-discipline specialists. Ability to multi-task, adapt strategy based on competing priorities and work independently within a global team. High quality results delivery with attention to detail.
• Experience of senior stakeholder management (including ability to efficiently articulate challenges), ability to apply forward thinking mindset, develop service strategy and understand business impact.
• Information security auditing experience and certifications a big plus, such as CISA or Certified ISO 27001 Lead Auditor.
• Strong cloud information protection audit experience that includes scoping, planning, performing, managing, reporting and remediation monitoring activities.
• Possess excellent business writing, reporting, presentation and communication skills in English.
• Strong SOC2 and IT operations knowledge. ISO27001 and ISO27017 standards and cloud security knowledge a big plus.
• Ability to manage but also be hands-on when required.
• Excellent communication and presentation skills, including executive reporting skills.
• Information security certifications would be a big plus, such as CISA or Certified ISO 27001 Lead Auditor.

Together with more than 276,000 colleagues in 138 countries throughout our member firms, people at KPMG imagine big ideas and bring solutions to life for clients both big and small. A role with KPMG International will open a world of opportunity in your career.