Manager, Security Governance, Risk and Compliance

About the position

KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization. This is a remote work opportunity.

Responsibilities

• Apply a thorough knowledge of risk, compliance, as well as information security to develop and execute multi-disciplined technology, data, and security risk assessment/analysis.
• Identify and evaluate controls for risk reduction and mitigation activities to drive a risk-based culture.
• Analyze the impacts of key risks, evaluate the changing operating landscape, define criteria to make risk tradeoffs, and make recommendations to leadership to minimize overall risk posture.
• Develop and maintain risk as well as control matrices, risk registers, and perform risk assessment/analysis including risk and control identification, analysis, evaluation, and recommend treatment plans.
• Create and present training material on risk, compliance (controls), best practices, methodologies and opportunities.
• Build and maintain trust-based relationships with peers and leaders across the Firm.

Requirements

• Minimum five years of recent experience in risk and compliance within a large professional services environment.
• Bachelor's degree from an accredited college or university is preferred.
• Relevant industry certifications, such as Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP) are preferred.
• Demonstrated understanding of disparate compliance frameworks and risk management principles.
• Ability to analyze and synthesize technical data and convey it to non-technical audiences.
• Understanding of key business objectives and how they align with technology requirements.
• Strong verbal/written communication, problem solving, analytical and independent judgment skills.

Benefits

• Comprehensive, competitive benefits package including medical and dental plans, vision coverage, disability and life insurance.
• 401(k) plans.
• Robust suite of personal well-being benefits to support mental health.
• Personal Time Off per fiscal year.
• Two firmwide breaks each year where employees will not be required to use Personal Time Off.