Job Description

KPMG is currently seeking an Associate, Cyber Security, Third Party Risk in Technology Enablement for our Consulting practice.

Responsibilities:

* Develop and implement third party security risk management wide risk strategy consistent with changing enterprise-specific and industry-wide risk and regulatory environment, and develop reports and scorecards, and implement third party security risk management training program to educate staff
* Be able to execute design, implementation, maintenance, and enforcement of third-party security risk management policies, procedures, and controls
* Execution of third-party security risk management program in client engagements
* Identify key program level metrics, e.g. key performance indicators (KPI) and key risk indicators (KRI) to measure the effectiveness of the program and measure the risk inherited by the organization
* Partner with other stakeholders (Enterprise Risk Management, Procurement, Information Security, Legal) to effectively coordinate the execution of third-party controls and identify technology integration opportunities and lead proof of concept engagements

Qualifications:

* A minimum of one year of related work experience in an Information Security role, and credentials in cyber and privacy (e.g., CIPP, DMR CIPM, CIPT, CISSP, CTPRP); Non-certified hires are required to become certified within one year from the date of hire
* Bachelor's degree required; Masters preferred
* Understanding of leading third-party security risk management platforms and tools including but not limited to ServiceNow, Archer, OneTrust, BitSight, SecurityScore etc will be an added advantage
* Exceptional interpersonal, team building, mentoring, and leadership skills with a demonstrated ability to gain the confidence and respect of senior level executives with a strong understanding of security risk management, integration with enterprise risk management, and the integration with business strategy
* Ability and willingness to travel up to 80% of the time, work in a fast paced, results driven environment, grasp new technology, and contribute at a rapid pace
* Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future