Specialist Director, Cloud Security

The KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise with KPMG. Looking ahead, we anticipate continued evolution and success within the practice, fostering both personal and professional development, thereby creating new pathways for growth. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture.

At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory.

KPMG is currently seeking a Specialist Director, Cloud Security to join our Managed Services practice.

Responsibilities:

• Provide strategic leadership for cloud security governance across AWS and Azure environments, including oversight of security posture, risk remediation, compliance, and continuous monitoring programs;
  Lead enterprise cloud asset, firewall, and security exception governance programs, including inventory accountability, lifecycle management, policy compliance, risk acceptance, and regulatory oversight.
• Drive accountability across engineering, infrastructure, application, and business teams to prioritize and remediate material cloud security risks;
  Define and oversee cloud security KPI/KRI reporting, executive dashboards, risk committee materials, compliance metrics, and governance performance measures.
• Set the strategic direction for secure adoption of cloud and AI-enabled technologies by establishing security baselines, guardrails, policies, and control frameworks;
  Partner with cloud, cybersecurity, architecture, and business leaders to embed security into platform strategy, architecture decisions, and enterprise cloud transformation initiatives.
• Provides management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams.
• Leads operational governance managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
• Oversees change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications:

• Minimum of eight years of cybersecurity experience, including leadership in cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline from an accredited college or university.
• Experience providing strategic oversight for enterprise-scale AWS and Azure environments, including multi-account governance models and CSPM/CNAPP security programs.
• Experience leading enterprise vulnerability management, risk management, compliance, control governance, cloud security programs, executive reporting, and risk-based prioritization initiatives.
• Demonstrated ability to influence senior stakeholders, lead cross-functional remediation efforts, and drive measurable risk reduction across large-scale technology environments.
• Technical knowledge of AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, Service Now CMDB, firewall governance, Tufin, enterprise risk management, and security control frameworks.
• Travel Requirements:
  Must be able to travel as needed based on…