Andrew Struthers-Kennedy

Managing Director

Andrew Struthers-Kennedy is a Managing Director and Protiviti’s Global Leader, Internal Audit & Financial Advisory. Andrew works with clients to help drive efficiency, effectiveness, and enhanced risk mitigation in their IT and business operations. He works with clients across several industries to deliver outsourced and co-sourced internal audit services, as well as technology, and risk management consulting services. 

Representative Projects

  • Actively working with clients to identify, prioritize, & design automation solutions using robotic process automation (RPA) and other automation tools.
  • Significant experience in various aspects of Information Technology – Strategy, Risk Management, Governance, Security, Privacy, Business Continuity / Disaster Recovery, Data Classification, Vendor Management, and Controls having led and been involved in numerous audit and consulting projects in these areas.
  • Work stream lead for a project tasked with establishing an IT Risk Management program at a global financial services institution with a focus on designing and implementing a risk framework to link the Bank’s principal operational risks to specific components of the IT environment.
  • Leads internal audit outsource, co-source, and Sarbanes-Oxley services for several organizations in the metro-DC market. In this capacity Andrew frequently interacts with executive management, Board and Audit Committee members.
  • Managed a wide range of data analysis projects, from the development of point-solution analytics and scripts to development and deliver of analytics training, to design and establishing of analytics functions. Performed training, speaking engagements, and authored articles on the topics.
  • Protiviti’s firm wide lead for RPA, Process Mining, and other emerging technologies for internal audit use.

Areas of Expertise

  • Internal Audit & IT Audit
  • Sarbanes-Oxley / Financial Controls
  • Information Security
  • Governance & Risk Management
  • Data Analytics
  • Project Risk Management
  • Emerging Technologies

Industry Expertise

  • Financial Services
  • Education
  • Technology
  • Professional Services


  • BSc Physics, University of Bristol, UK
  • MSc Information Security, University of Westminster, UK

Professional Memberships and Certifications

  • Board of Governors, Baltimore Chapter, Institute of Internal Auditors (IIA)
  • QAR Accredited by the IIA
  • Certified Information Systems Auditor
  • Certification in Risk Management Assurance
  • ITIL Practitioner