Summary
KPMG Lower Gulf is seeking an Internal Audit Consultant in Muscat, Oman. The role supports internal audit engagements from planning and testing through reporting, as well as ERM and BCM activities. Duties include preparing risk assessments and continuity plans, developing Power BI dashboards, analyzing data, and producing client reports and presentations. Applicants should have 4–5 years of relevant experience, strong knowledge of controls and risk management, and a bachelor’s degree in a related field; professional certifications are preferred.
The posting
As published on kpmg.com. Pulled from the employer's site and shown as they wrote it.
Job Purpose
Support the delivery of Internal Audit, Enterprise Risk Management (ERM), and Business Continuity Management (BCM) engagements, while leveraging data analytics and Power BI to provide insightful, value-driven outcomes for clients.
Key Responsibilities
- Execute Internal Audit engagements, including planning, fieldwork, testing, and reporting
- Support ERM activities such as risk assessments, risk registers, and risk frameworks
- Assist in delivering BCM engagements including BIA, business continuity plans, and testing/exercises
- Develop dashboards and reports using Power BI to enhance risk insights and audit reporting
- Analyze data to identify trends, control gaps, and improvement opportunities
- Prepare high-quality client deliverables and presentations
- Collaborate with team members and stakeholders across multiple engagements and industries
Skills & Experience
- 4-5 years of relevant experience in Internal Audit, Risk, ERM, or BCM
- Hands-on experience with Power BI (data modeling, dashboards, visualizations)
- Strong understanding of internal controls, risk management, and governance frameworks
- Good analytical, communication, and report-writing skills
- Experience in consulting or professional services is an advantage
Qualifications
- Bachelor’s degree in Accounting, Finance, Risk Management, or a related field
- Professional certifications (CIA, CISA, CRISC, ISO 22301, or similar) are preferred