Khaitan & Co - Specialist - Risk Management & Internal Audit

This role is open for internal mobility within the allied professional groups at KCO

Team Description

The Risk, Audit and Compliance (RAC) division at the firm owns the integrated risk management, internal audit, and compliance aspects of the business and support functions

Risk management includes, but is not limited to, conducting risk assessment and analysis of the business and support functions, maintaining working relationships with senior stakeholders, providing risk advisory services (as required), and remaining integrated with the compliance and internal audit aspects Internal Audit includes, but is not limited to, leveraging the risk assessments of the business and support functions, maintaining working relationships with senior stakeholders, conducting risk-based focused internal audits of the business and support functions, following through for the entire lifecycle of observations and recommendations, and remaining integrated with the risk management and compliance aspects

Internal Audit includes, but is not limited to, leveraging the risk assessments of the business and support functions, maintaining working relationships with senior stakeholders, conducting risk-based focused internal audits of the business and support functions, following through for the entire lifecycle of observations and recommendations, and remaining integrated with the risk management and compliance aspects

Compliance includes, but is not limited to, managing the day-to-day compliance aspects of the business and support functions, maintaining working relationships with senior stakeholders, conducting risk-based focused compliance reviews, providing responses to risk, audit and compliance-related queries from clients, vendors and regulators, and remaining integrated with the risk management and internal audit aspects

The RAC division also has a specialized data analytics & engineering team, which supports the data analytics, project management, tools & workflows, and reporting requirements of the division. This team is tasked with a number of responsibilities, which includes, but is not limited to, conducting risk-based focused data analytics assessments for the business and support functions in conjunction with other members of the RAC division from risk management, internal audit, and compliance; managing the build, test and operation of tools and workflows required for risk assessment, compliance reviews, and internal audit engagements; and managing the project management aspects of a number of strategic transformation projects within the RAC division

Key Responsibility Areas:

The incumbent will primarily be in charge of:

Lead and/or participate in internal audit engagements for the complete lifecycle of internal audit activities at the firm (with a focus on the IT aspects of the business and functions)

Work across a wide variety of areas as per the risk taxonomy adopted by the firm such as Employment (includes Insider Trading), Business Conduct (includes Conflict of Interest), Client Suitability (includes AML / KYC, etc), Vendor / Third Party Risk, Procurement / Sourcing, Supervision, Corporate & Legal Entity Governance, Information Security (includes ISMS, Data Privacy (GDPR), etc), and Information Technology & Cyber (includes Cloud Computing, ERP, etc)

Conduct efficient and effective risk assessment of the business and support functions of the firm to form a view of the applicable audit universe (with a focus on the IT aspects of the business and functions)

Work closely with the Head - Risk Management and Internal Audit for the delivery of the annual audit plan as well as preparation and maintenance of the underlying risk-assessed audit universe

Provide hands-on contribution to all stages of the lifecycle of internal audit engagements throughout the firm and across the complete cross-section of the risk taxonomy (with a focus on the IT aspects of the business and functions). Contribution across lifecycle stages would include, but not be limited to, planning, testing (design adequacy and operating effectiveness), reporting, and observation / issue management

Provide supervision and governance for all internal audit matters (as needed), including aspects such as review of work papers, preparation and closure of audit files, definition and enhancement of data analytics tools and workflows, etc

Demonstrate leadership in managing working relationships with senior stakeholders for aspects such as risk assessment, observation and recommendation discussion, observation management, etc

Work with the Chief Risk, Audit and Compliance Officer (CRACO) for strengthening the integrated risk, audit and compliance framework at the firm, liaison with clients, vendors and regulators (as needed), providing leadership and contribution to a variety of strategic transformation projects, etc

Education and prior experience:

- CA / BE or BTech with 5+ years of relevant full-time work experience in risk management and internal audit, with a specialization or sustained focus in IT

- Having an MBA will be an added advantage

- Having a CISA / CISM / CRISC / CDPSE / CISSP, etc will be an added advantage

- Having prior experience in the BFSI sector (in a corporate setting) and/or professional services firm (in advisory and/or assurance) will be an added advantage

- Wide experience in working in diverse and geographically distributed teams in a hybrid working model

- Deep experience in participating in and/or leading risk assessment and internal audits across a number of areas of the risk taxonomy such as Employment, Business Conduct, Client Suitability, Vendor / Third Party Risk, Procurement / Sourcing, Supervision, Corporate & Legal Entity Governance, Information Security, and Information Technology & Cyber

- Demonstrated leadership in contributing to the momentum and remit of strategic transformation projects across people, processes, products (technology) and partners (vendors), etc

- Demonstrated sense of innovation and high degree of data literacy, enabling the use of modern automated techniques for risk management and internal audit

Competencies:

- Excellent team working skills

- Deep experience in risk management and internal audit across the whole lifecycle of engagements and across a wide cross-section of the risk taxonomy (with a focus on IT aspects of the business and functions)

- Excellent analytical skills, with demonstratable and relevant experience in:

- Detailed knowledge of Microsoft Office 365 Cloud-based applications; and,

- Basic to moderate levels of data analytics, either back end (data acquisition, sanitization, staging, etc) or front end (data reports, dashboards, dynamic queries, etc) through MS Excel and MS SharePoint (formulae, macros, VBA) and/or other proprietary or free DA/DE tools

- Well-honed interpersonal skills

- Ability for multi-tasking and switching focus based on priority and demand

- Attention to detail as well as the ability to appreciate the larger picture

- Excellent written and oral communication