Senior Consultant – Technology Risk, Cyber & Internal Audit

About the Team

Join KPMG’s Technology Risk and Cyber team — a fast-growing, nationally led group of experts helping clients tackle complex technology risks and cyber threats. With deep capabilities in cyber strategy, risk management, cloud security, and incident response, the team works across industries to deliver innovative, resilient solutions. Be part of a collaborative, future-focused environment where your skills in tech and security make a real impact.

Role Purpose

As a Senior Consultant in the Technology Risk and Cyber team, you will play a key role in delivering IT risk and assurance services to clients. You’ll work closely with multidisciplinary teams to help organisations identify, assess, and manage technology-related risks, while contributing to the development of innovative solutions and methodologies.

This role is based in our Sydney office, offering the opportunity to work with local and national clients across a variety of industries.

Responsibilities

• Support the delivery of IT risk and assurance services, including IT internal audits, service organisation controls reporting, IT risk assessments, and IT project assurance reviews.
• Assist in developing IT risk mitigation strategies and scoping individual IT assurance engagements.
• Collaborate with client, vendor, and KPMG teams to ensure timely and high-quality delivery of technology risk engagements.
• Contribute to business development activities, including proposal writing and client presentations.
• Stay up to date with developments in technology, IT risk management, and assurance practices to ensure KPMG’s approach remains innovative and relevant.

Experience

• Strong written and verbal communication skills, with the ability to produce high-quality reports and presentations.
• Detail-oriented and committed to delivering work on time and to a high standard.
• Proven ability to work collaboratively within diverse and multidisciplinary teams.
• Experience in IT risk, assurance, or cyber-related engagements is highly regarded.