Vacancy expired!
Business Title: Sr. Associate, Cyber Security - Third Party RiskRequisition Number: 53184 - 11Function: AdvisoryArea of Interest: Tech EnablementState: CACity: San FranciscoDescription:Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Working Mother Magazine, Diversity Inc. and others. If you're as passionate about your future as we are, join our team.KPMG is currently seeking a Sr. Associate, Cyber Security, Third Party Risk in Technology Enablement for our Consulting practice.Responsibilities:Develop and implement third party security risk management wide risk strategy consistent with changing enterprise-specific and industry-wide risk and regulatory environment, and develop reports and scorecards, and implement third party security risk management training program to educate staff
Be able to execute design, implementation, maintenance, and enforcement of third-party security risk management policies, procedures, and controls
Execution of third-party security risk management program in client engagements
Identify key program level metrics, e.g. key performance indicators (KPI) and key risk indicators (KRI) to measure the effectiveness of the program and measure the risk inherited by the organization
Partner with other stakeholders (Enterprise Risk Management, Procurement, Information Security, Legal) to effectively coordinate the execution of third-party controls and identify technology integration opportunities and lead proof of concept engagements
Qualifications:A minimum of three years of related work experience in an Information Security role, and credentials in cyber and privacy (e.g., CIPP, DMR CIPM, CIPT, CISSP, CTPRP); Non-certified hires are required to become certified within one year from the date of hire
Bachelor's degree required; Master's preferred
Understanding of leading third-party security risk management platforms and tools including but not limited to ServiceNow, Archer, OneTrust, BitSight, SecurityScore etc will be an added advantage
Exceptional interpersonal, team building, mentoring, and leadership skills with a demonstrated ability to gain the confidence and respect of senior level executives with a strong understanding of security risk management, integration with enterprise risk management, and the integration with business strategy
Ability and willingness to travel up to 80% of the time, work in a fast paced, results driven environment, grasp new technology, and contribute at a rapid pace
Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future
KPMG LLP (the U.S. member firm of KPMG International) offers a comprehensive compensation and benefits package. KPMG is an affirmative action-equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.GL: 5GF: 15304
