Manager, Third Party Risk Inquires

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today’s most important industries. Our growth is driven by delivering real results for our clients. It’s also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it’s no wonder we’re consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you’re as passionate about your future as we are, join our team.

KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization.

Responsibilities:

• Apply a thorough understanding of security to complete client-provided security questionnaires in an accurate, timely and consistent manner as well as establish and maintain effective business relationships with IT control owners throughout the firm
• Maintain and contribute to the Client Security Inquiry (CSI) Evidence Bank by gathering client-facing evidence in support of KPMG’s controls from a wide variety of stakeholders inside and outside of ESS and IT
• Assist in the annual refresh process for CSI artifacts (SIG, whitepapers), successfully incorporating feedback from multiple stakeholders
• Help maintain the CSI workflow as documented through the ticket tracking system
• Collaborate with security and technology teams on various initiatives, projects, and strategies
• Assist the CSI team in preparing for client audits and assessments
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful and courteous work environment

Qualifications:

• Minimum five years of recent risk and compliance experience within a large professional services environment specializing in physical and cyber security
• Bachelor’s degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; CISSP, CISA, or similar certification(s) preferred
• Experience in security and interactions with and support of clients within a large IT organization, preferably within a professional services firm or in a similar environment
• Familiarity with the AICPA Service Organizations Control reports and their purpose; be aware of concepts in Audit testing, evaluation of control evidence, identification of control deficiencies and facilitating the remediation processes; familiarity with NIST, ISO, HIPAA, GDPR, and other IT, Privacy and Information Security Frameworks and laws
• Strong problem solving, organizational and independent judgment skills to support an environment driven by customer service and teamwork and ability to build successful and productive relationships with peers
• Exceptionally strong reading, verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=7467_9_26
California Salary Range: $127200 – $246900

KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link “https://assets.kpmg.com/content/dam/kpmg/us/pdf/2018/09/eeo.pdf? ”contains further information regarding the firm’s compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.