Job Description

KPMG is currently seeking an Associate Director, Security Architecture to join our Digital Nexus technology organization.

Responsibilities:

* Lead the direction of information security through the development of an information security strategy that addresses the threats to the KPMG environment and data
* Collaborate with engineering teams to drive the product roadmaps for security tools, by providing security requirements that help to map security controls and patterns to product features
* Lead internal skills development activities for information security personnel on new technologies or process changes driven by security requirements, by providing mentoring and conducting knowledge sharing sessions
* Serve as the Security Lead in the design, implementation and integration phases of cloud-based solutions to meet client and firm security requirements, address enterprise risks and exposures in cloud-based solutions
* Define information security controls and patterns that support risk assessments and support the development of secure architectures; provide technical security expertise to KPMG teams' solutions including communicating security architectural decisions, benefits and risks
* Collaborate with technology architecture teams by performing security analysis of proposed architectures, providing risk assessment feedback, including security requirements; provide security consulting services internally to the organization by giving security guidance and functioning as an information security subject matter professional

Qualifications:

* Minimum eight years of recent security architecture experience, preferably within a professional services firm or similar environment; minimum of five years leading IT security initiatives
* Bachelor's degree from an accredited college/university; or equivalent work experience; CISSP is preferred
* Experience designing and implementing secure architecture and reference architectures; from business requirements gathering to technology rollout oversight, including capacity management, definition of scoring methodologies for technology selection, integration of multiple tools and reporting functionalities, technical documentation
* Technical experience with one or more of the following areas: Identity management, Active Directory, Intrusion Detection/Prevention and NGFW (Sourcefire, Palo Alto), endpoint protection (Symantec, Bit 9), cloud infrastructure (Azure, AWS), web application firewalls (Imperva)
* Experience with security related regulatory requirements, such as NIST, PCI, ISO 27001, HIPAA compliance
* Excellent verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and team work; able to set goals and participate in strategic initiatives for a team; and foster the development of high performance teams and interface with all levels of the organization; ability to participate in development of resource plans and structures and influence organizational priorities