Responsibilities:

• Apply a thorough knowledge of IT security and architecture to manage the day-to-day operational responsibilities of a comprehensive information security program that aligns with the firm's goals and objectives, effectively addressing the evolving threats to the firm's environment and data; serve as an internal trusted advisor providing security consulting services across multiple technical domains to project teams and other professionals
• Develop and maintain effective working relationships with multiple internal technology groups to keep alignment on strategies; promote and foster collaboration and standardization across multiple internal federated technology groups based on common technology interests and priorities; become a go-to subject matter professional to others within the firm to achieve the required goals and objectives
• Participate in internal skills development activities for information security personnel on new technologies, controls, practices, techniques, and threats; develop and maintain effective working relationships with multiple public and private cloud vendors to advocate for product enhancements to meet the firm's needs and inform internal stakeholders of upcoming features of interest
• Research and develop information security controls, security configuration baselines, and security design patterns that support risk assessments and the development of secure (or cloud-based) architectures and/or application development
• Stay abreast of emerging trends and technologies in information security, participating in the continuous improvement of the organization's security posture; engage in internal training sessions for information security staff on emerging technologies, controls, practices, techniques, and threats
• May oversee work products, contribute to staffing decisions, and supervise the work performed by more junior staff; provide coaching, mentoring, and feedback to such individuals and may also serve as a formal performance manager of a team of junior employees
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum five years of recent security architecture experience, preferably within a professional services firm or similar environment; technical expertise across multiple technical domains, including application development, cloud computing, security, identity and access management, IT infrastructure, and emerging technologies such as Generative AI
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; preferred certifications include CISSP and either CCSP or CCSK, or equivalent industry experience; other certifications of importance: AZ-500 – Microsoft Azure Security Technologies, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty, MCSE: Cloud Platform and Infrastructure, AWS Certified Solutions Architect
• Experience in both designing and securing solutions in a complex and regulated enterprise environment to offer solutions in an “as-a-service” model; demonstrated ability to enforce security requirements; experience with security-related regulatory requirements, such as NIST, PCI, ISO 27001, HIPAA compliance
• Understanding of cloud computing architecture, technical design, and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), and containerized delivery models across multiple different cloud vendors; experience with modern solution delivery methodologies including Agile and DevSecOps and incorporating security into the overall system development lifecycle
• Excellent verbal and written communication skills, with the ability to effectively engage with individuals at all levels of responsibility and authority; strong troubleshooting and organizational skills, and the ability to manage multiple projects simultaneously
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT, or any other employment-based visa)