Lead Specialist, Cloud Security

The KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise with KPMG. Looking ahead, we anticipate continued evolution and success within the practice, fostering both personal and professional development, thereby creating new pathways for growth. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory.

• Manage cloud security posture across AWS and Azure environments, governing the review, prioritization, remediation, and reporting of security risks, misconfigurations, and compliance issues; Support secure adoption of cloud and AI-enabled services by implementing security baselines, guardrails, policies, and risk assessments across cloud platforms.
• Oversee cloud asset governance, including inventory accuracy, ownership accountability, lifecycle management, CMDB compliance, and visibility of unmanaged resources; Govern firewall security operations through Tufin and related platforms, ensuring policy compliance, risk reduction, audit readiness, and issue remediation.
• Manage cloud and firewall security exception processes, including risk acceptance, compensating controls, renewals, reporting, and regulatory compliance; Serve as a key liaison between cybersecurity, engineering, infrastructure, application, and risk teams to drive security governance and measurable risk reduction.
• Provides management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams.
• Leads operational governance managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
• Oversees change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

• Minimum five years of recent cybersecurity experience, including cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline
• Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin
• Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks
• Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs
• Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes
• Ability to travel as needed
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)