Title: IT Auditor
Company Name: KPMG Advisory Services Limited
Vacancy: 4
Age: 25 to 30 years
Job Location: Dhaka
Salary: Negotiable
Experience:
Published: 2026-02-09
Application Deadline: 2026-02-17
Education:
Basic understanding of IT infrastructure, operating systems, databases, and networks.Familiarity with IT General Controls (ITGC) and application controls is a plus.Awareness of cybersecurity concepts, data privacy regulations and risk management.Strong attention to detail when working with large data sets or complex systems.Eagerness to learn and develop skills in IT auditing and compliance.Good verbal and written communication skills to document findings and interact with clients or internal teams.Knowledge of Microsoft Office (Excel, Word, PowerPoint).Strong organisational and time management skills.
Assist in the planning and scoping of IT audits by supporting senior auditors in the development of risk-based audit strategies.
Conduct IT General Controls (ITGC) and application controls testing to assess the effectiveness of automated controls within core business systems.
Analyse an organisation’s IT systems and infrastructure to identify inefficiencies, weaknesses or control gaps.
Support data analysis by extracting and interpreting data to identify irregularities, trends, or areas of concern.
Identify potential IT risks, cyber threats, and vulnerabilities by applying current knowledge of the technology landscape and best practices.
Assess IT policies and procedures for compliance with internal frameworks, industry standards and relevant legislation or regulation.
Prepare working papers and audit findings in accordance with internal documentation standards to support audit conclusions.
Draft and present clear, concise and accurate audit reports to management and stakeholders.
Contribute to IT risk assessments to highlight areas of concern and propose mitigation strategies.
Monitor the implementation of management action plans following audit recommendations.
Gain hands-on experience with audit and data analytics tools such as ACL, IDEA, or GRC platforms under appropriate supervision.
Stay up to date with developments in IT, cybersecurity, cloud computing and data protection regulations.