Information Security Risk Analyst - Consultant

Kpmg-0828bc85; Sydney; In loco; AUD 85.000 - 95.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible hours and locations

Generous paid parental leave

Career breaks

Retail discounts

Health and wellbeing initiatives

Learning and growth opportunities

Salary packaging options

More

Descrizione del lavoro

KPMG Australia is seeking an Information Security Risk Analyst – Consultant to evaluate and strengthen cyber security across systems, architectures, and third-party integrations. You will produce critical reporting for IT leaders and executives while guiding risk-based decisions in acquisitions and technology deployments.

Ideal candidates hold a bachelor’s degree in IT or business, with certifications such as CISM/CRISC/CISSP and hands-on experience in AWS or Azure cloud environments.

Competenze

• Familiarity with security standards and frameworks including ISO27001 and NIST 800-53.
• Knowledge of Cloud Services and risk management, with emphasis on AWS and/or Azure.
• Experience with diverse application architectures and their security implications.
• Accredited certifications (CISM, CRISC, CISSP, SABSA) or equivalent AWS/Azure cloud qualifications preferred.

Mansioni

• Evaluate systems, applications, and software to determine cyber security status and develop improvement plans.
• Analyse architectural documentation with a focus on cyber security.
• Provide cyber security reporting to local IT leaders and regional/global executives.
• Offer expert risk assessment and advice during acquisitions and third-party integrations.
• Propose security measures balancing risk and scale of threats.
• Champion projects to strengthen the security framework, exploring AI, blockchain, and quantum computing.

Conoscenze

ISO27001 knowledge

NIST 800-53

Cloud security

Risk assessment

Threat modelling

Security governance

Formazione

Bachelor's degree in IT or business-related discipline

Strumenti

AWS

Azure

Descrizione del lavoro

Information Security Risk Analyst - Consultant

• Full-time

KPMG Australia is part of a global network providing extensive services across a wide range of industries and sectors. Our people collaborate, share their expertise, and create innovation as we partner with clients to solve complex challenges, empower change, drive disruption and growth. We look for talented people with the potential to make an extraordinary difference for our clients, our firm, and our communities.

KPMG’s Technology & Information Risk Management is your opportunity to be part of a team on the rise! Rapidly growing with many competent individuals with various technical backgrounds, the Security Risk team supports business stakeholders in bringing their ideas to life while helping them to shape the future of the firm, by exploring and embedding new forms of growth.

The role of the Information Security Risk Analyst at KPMG contributes to the improvement of the company's information security posture and provides support to various departments within the organisation in several ways:

• Identifying and Managing Risks: The analyst helps in identifying and managing cyber security and other technology and information risks. This involves performing threat assessments to identify potential risks to the business and determining the preventative controls in place.
• Enhancing Business Resilience: The analyst contributes to enhancing the organisation's business resilience by reviewing and recommending effective controls over technology assets. This helps in building the organisation's resilience and strengthening core controls to meet the challenges of technology and information risks.

In summary, the role of the Information Security Risk Analyst is crucial in maintaining KPMG's information protection agenda as the business and technology programmes evolve, providing greater visibility and understanding of changing risks.

Key Duties & Responsibilities:

• Evaluate a range of systems, applications, and software throughout KPMG Australia to determine cyber security status and develop plans for improvement.
• Analyse architectural documentation of systems, solutions, and applications with a focus on cyber security.
• Provide insightful cyber security reporting to local IT leaders as well as regional and global executives, occasionally taking the lead role in this area.
• Offer expert risk assessment and advice during the acquisition process and when integrating third-party solutions, technologies, and services.
• Propose security measures that effectively balance risk mitigation while remaining aligned with the scale of potential threats.
• Champion projects aimed at strengthening the firm’s security framework, seeking innovative methods to evaluate state-of-the-art technologies, including artificial intelligence, blockchain, quantum computing, among others.

How are you extraordinary?

• You actively seek out opportunities for growth, are comfortable challenging the status quo, and enjoy getting out of your comfort zone.
• You are passionate about the importance of fantastic communication to share ideas, inspire, and create change. You can digest, distil, and communicate complex concepts in both written and verbal forms.

Your Experience

• Familiarity and Knowledge of security standards and frameworks including, but not limited to, ISO27001, NIST 800-53, alongside a sound understanding of Cloud Services, Risk Management, and associated Security & Privacy Controls.
• In-depth knowledge of Cloud technologies and infrastructure, particularly with AWS and/or Azure ecosystems.
• A solid grasp of diverse application architectures and their security implications.
• Accredited certifications such as CISM, CRISC, CISSP, SABSA, or other relevant qualifications, especially those related to AWS or Azure cloud technologies, will be considered highly beneficial.

Please note, the salary ranges $85k - $95k inclusiveof superannuation, with respect to your level of experience.

The position is a Permanent Full-Time role, with flexibility to be based in either Melbourne or Sydney.

Minimum of a bachelor’s degree in an information technology or business-related discipline.

KPMG is a professional services firm with global outreach and deep sector experience. We work with clients across an array of industries to solve complex challenges, steer change and enable growth.

Our people are what make KPMG the thriving workplace that it is and what sets us apart is that we know great minds think differently. Collaborate with a team of passionate, highly skilled professionals who’ve got your back. You’ll build relationships with unique and diverse colleagues who will provide you with the support you need to be your best and produce meaningful and impactful work in an inclusive, equitable culture.

At KPMG, you’ll take control over how you work. We’re embracing a new way of working in many ways, from offering flexible hours and locations to generous paid parental leave and career breaks. Our people enjoy a variety of exciting perks, including retail discounts, health and wellbeing initiatives, learning and growth opportunities, salary packaging options and more.

• flexible hours and locations
• generous paid parental leave
• career breaks
• retail discounts
• health and wellbeing initiatives
• learning and growth opportunities
• salary packaging options
• more

Diverse candidates have diverse needs. During your recruitment journey, information will be provided about adjustment requests. If you require additional support before submitting your application, please contact the Talent Attraction Support Team .

At KPMG every career is different, and we look forward to seeing how you grow with us.