Veronica Rubio

Partner, Advisory

KPMG in Canada

Veronica is the Partner leading KPMG’s Governance, Risk and Compliance Services in Calgary, with over 18 years of global experience. Her expertise includes Internal Audit, Internal Controls (ICFR)/SOX/C-SOX and NI52-109, Risk Assurance, Project Assurance / Implementation Risk Assurance, IT and business process risk management and controls audit, Enterprise Risk Management (ERM), Governance, Third-Party Risk Management (TPRM), IT and Business Process Optimization, Technology and Business advisory, and program management. With a background in Computer Engineering, a certification in Information Systems Audit, and studies in Financial Accounting together with her experience and background across all areas of risk management spanning both across consulting and industry leadership roles, she provides her clients with a comprehensive view of risk and makes her a well-rounded leader with a deep focus on quality and positive client experience.

Her proficiency is highlighted by her work with Big 4 firms and top Canadian banks, where she led in external and internal audit functions, led risk management functions within the business, and developed internal controls reporting frameworks, amongst other roles. Veronica has successfully led large-scale complex controls reviews and consulting engagements, showcasing her effective project management skills.

Veronica has managed multimillion-dollar portfolios across various sectors, including Power & Utilities, Oil & Gas, Financial Services, Technology, and Retail. She emphasizes the importance of risk awareness and management, and the undeniable relationship between business performance and its underlying technology: thinking of one without the other leads to major risk exposure; both are very closely linked.

As an Internal Audit and Internal Controls lead, she has overseen high-profile projects and consulting services, demonstrating her reliability and competence. In addition to her core skillset, her leadership in the evolving field of Technology and Cloud Assurance has also allowed her to develop governance frameworks and risk management strategies. Her proactive approach is evident in her leadership of a remediation program to enhance internal governance and her creation of the Cloud Risk Index and Risk Management Frameworks for clients, reflecting her innovative risk management strategies.

  • Continuous auditing and continuous monitoring
  • Enterprise Risk Management and Governance, Risk and Compliance
  • GRC Technology and Business Systems Controls
  • Internal Audit, Risk and Compliance Services
  • Process improvements
  • Project risk management
  • Risk Consulting
  • Risk Management
  • BSc Computer Engineering, Universidad Simón Bolivar

  • Certified Information Systems Auditor (CISA), ISACA

  • Certified Internal Auditor (CIA), Institute of Internal Audit (ongoing)