Cybersecurity Incident Coordinator

KPMG•Abbotsford, BC

About The Position

At KPMG in Canada, the Cybersecurity Incident Coordinator is a key member of the Digital Security Group (DSG), reporting to the Senior Manager of the CISO office and the Director of Security Operations. The role supports coordination and tracking for high-priority security incidents and global cybersecurity campaigns, connecting the appropriate teams, tracking actions and timelines, maintaining current documentation, and providing timely stakeholder updates. The position primarily supports Frontier AI Response & Cybersecurity Coordination, helping the firm adapt and respond to emerging cyber risks. This includes coordinating P1/P2 cybersecurity incidents, global cybersecurity campaigns and security changes, and emerging cyber risk and vulnerability response. The role coordinates remediation activities, tracks ownership and progress, and helps ensure global response requirements and service-level agreements are met. The position requires written and oral fluency in English and collaboration with English-speaking colleagues or stakeholders nationally in KPMG’s English-speaking provinces. The expected base salary range is $87,500 to $130,500 in the Ontario, British Columbia and New Brunswick regions; the position may also be eligible for bonus awards. KPMG states that it offers a comprehensive and competitive Total Rewards program.

Requirements

At least 5 years of experience in cybersecurity, information technology, project coordination or stakeholder management, including experience working with senior leaders or executives.
A university degree in computer science or a related discipline.
Hands-on experience coordinating cybersecurity or IT incident response, including meetings, activities, projects, action tracking and follow-up.
Good understanding of cybersecurity concepts and security terminology, and familiarity with vulnerability detection tools.
Strong organizational and coordination skills, ability to manage multiple activities and track actions, owners, timelines and dependencies, and strong attention to detail.
Strong written and verbal English communication skills, including documenting meetings, decisions and action items; preparing status reports, trackers and presentations; and explaining technical information clearly to technical, non-technical and executive stakeholders.
Ability to build effective relationships and work with cross-functional teams and stakeholders at all levels to advance initiatives and drive assigned actions forward.
Proficiency with Microsoft 365 applications.
Written and oral fluency in English, with ability to support or collaborate with English-speaking colleagues or stakeholders nationally in KPMG’s English-speaking provinces.
Availability for rotational 24/7 on-call support during critical incidents, including evenings, overnight periods, weekends and holidays; extended hours may be required for major outages or other business-critical events.

Nice To Haves

Experience using vulnerability detection tools such as Wiz, Qualys, Microsoft Defender for Endpoint (MDE) or Cyera.
Experience with ServiceNow or a similar IT service management or ticketing platform.
One or more relevant certifications, such as CISSP, CISM, ITIL 4 Foundation or a project management certification.

Responsibilities

Coordinate responses to P1 and P2 cybersecurity incidents, emerging cyber risks and priority vulnerabilities, engaging appropriate security, technology, business, privacy, data and risk stakeholders.
Schedule and facilitate incident bridge calls, working sessions and cross-functional meetings with Canadian, Global and external stakeholders.
Track actions, owners, timelines, dependencies, risks, blockers and outstanding items, including progress against Global requirements and service-level agreements.
Maintain incident timelines, meeting minutes, action trackers, remediation records and key decisions; follow up with action owners on overdue items.
Prepare and distribute incident updates, consolidated remediation reporting, dashboards, management reports and presentations to support visibility, escalation and decision-making.
Support post-incident reviews and lessons-learned activities, and recommend improvements to the security program’s effectiveness, efficiency, resilience and maturity.
Coordinate the Canadian member firm’s response to Global cybersecurity campaigns, security changes and related communications with groups such as the Global Information Security Group and Global Quality & Risk Management.
Build and strengthen relationships across KPMG businesses, member firms, Global teams and vendors to support delivery and maintenance of the security program.
Coordinate security escalations and obtain appropriate approvals to support timely resolution of cybersecurity and data protection matters.
Participate in and, where required, lead information security and data protection projects; track project progress, portfolio activities, deliverables and budgets.
Stay current on information security and data protection trends, emerging technologies and evolving cyber risks to inform response and program priorities.
Participate in rotational 24/7 on-call support, including evenings, overnight periods, weekends and holidays during critical incidents; work extended hours when required for major outages or other business-critical events.