Risk Manager

KPMG-posted 3 months ago
Tysons Corner, VA
5,001-10,000 employees
Professional, Scientific, and Technical Services
Resume
Match Score
Upload and Match ResumeTrack Jobs with Teal

KPMG Assignment Select is geared toward independent professionals interested in temporary or project-based work. Our team is comprised of highly trained third-party professional individuals who are in the right place, at the right time, with the right skillset. KPMG is working through its partnership with MBO Partners and is currently seeking a remote contractor in the United States.

  • Obtain the inventory of applications and applications owners for the in-scope application portfolio
  • Perform interviews and review documentation to understand current landscape, policies, and extent of access review processes throughout selected portfolio.
  • Organize application inventory by access review coverage categories (i.e. review type of access: broad base, privileged, SharePoint, or passwords configs and by supporting technology: manual/spreadsheet based vs. Saviynt).
  • Draft 2nd line access review monitoring and oversight processes and documentation by category including: Standard operating procedure (SOPs) and overall design documentation including timeline of activities for a review cycle and a RACI matrix, Process flows, Review templates for each category, Instructions for 1st line reviewers, Quality assurance (QA) checklist for 2nd line monitoring team, Metrics and KPI reporting instructions for 2nd line monitoring team, Templates for quality control evidence packages for each category, Requirements and high-level test scripts for onboarding reviews to Saviynt.
  • Work with application owners to review documentation and complete the relevant templates for 1-2 reviews to adjust and improve process based on feedback.
  • Conduct a series of workshops by category to train control owner groups on first line responsibilities and expectations.
  • Pilot 2nd line monitoring process for reviews (a 'review cycle') and prepare access review monitoring documentation (evidence packages) for audit in support of internal audit finding remediation.
  • Report key performance metrics to leadership, specifically around timeliness, completeness, and accuracy of reviews and associated actions.
  • Provide subject matter expertise on matters related to remediation including assistance with questions or discussion items brought forth by internal audit to determine if responses meet the objective of the original question(s).
  • Conduct internal workshops to train 2nd Line monitoring team resources on second line responsibilities and expectations.
  • Draft schedule of review cycles to be executed by first line with full 2nd line monitoring over the course of the subsequent 12 months.
  • Draft documentation related to a second line governance and oversight teams involvement in the following: Program charter, Delivery and resource model, RACI matrix, Reporting and analytics, Technology and automation, Risk assessments, Project and program support, Documentation, Training and awareness, Remediation support, Audit liaison, Quality Monitoring (QA).
  • Draft roadmap of implementation, stabilization, and optimization activities for management to execute over defined timelines.
  • Someone who knows access reviews extremely well and can quality check them.
  • Someone who can write process documentation.
  • Someone who understands second line risk oversight and governance.
  • Experience with Insurance or Financial Services is preferred.
  • Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
Track Jobs with Teal

Job Search Resources

•
Resume Builder
•
Risk Management Resume Examples
•
Risk Management Cover Letter Examples

Tools

Career Hubs

Guides

Company

© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service