Andrew Sujan

Andrew is a seasoned IT Audit professional with over 15 years of experience in KPMG’s Risk Consulting Services. He has led numerous engagements across internal audit, systems audit, RPA, forensics, system design and development, and data analytics. His expertise spans IT internal audit, cybersecurity, risk management, digital forensics, and data analytics — enabling businesses to navigate the digital landscape securely and effectively. 

Andrew has also managed regulatory compliance engagements, demonstrating deep awareness of emerging technology trends, associated risks and controls, and regulatory requirements — particularly in IT governance and compliance. 

Through his work, Andrew has consistently identified critical IT control weaknesses and provided actionable recommendations to strengthen and safeguard IT control environments.