Service Delivery Security Manager

TN United Kingdom; Norwich; On-site; GBP 60,000 - 100,000; Full time

Job description

Service Delivery Security Manager

Team

The Service Delivery Security Manager role is within the KPMG UK Information Security function, reporting directly to the Security Production Assurance & Compliance Lead. This role is essential for providing and delivering secure, innovative, technology-enabled services and solutions for KPMG and its clients. It plays a vital role in demonstrating that KPMG delivers 'secure by design' services, ensuring trust from business stakeholders, clients, and regulators.

Role

The primary purpose is to facilitate the harmonious delivery of Security Services by ensuring strong collaboration with external Service Providers and all KPMG business functions. There are three main focus areas:

1. Manage the security services relationship to protect the delivery of end-to-end services involving all KPMG UK Technology services or third-party suppliers.
2. Provide governance for infrastructure security services.
3. Oversee the complete set of services provided by KPMG UK Technology and third-party suppliers, troubleshoot issues, and escalate as needed.

Key responsibilities include:

1. Work closely with Service Owners to understand their service roadmaps and operational requirements.
2. Lead the governance process for these services.
3. Ensure compliance with firm standards, guidelines, and contractual commitments.
4. Review and govern Service Provider quality, improvement plans, issues, and operational risks, involving the Security Production Assurance & Compliance Lead as needed.
5. Facilitate issue resolution through consensus building and escalation.
6. Manage Service Provider knowledge management, reporting, documentation, and engagement practices for operational excellence.
7. Review capacity plans to ensure adequate resources align with demand and roadmaps.
8. Consolidate and report on security service delivery and initiatives.
9. Coordinate planned changes to minimize disruption to Security services.
10. Communicate major changes or enhancements in Information Security to relevant teams and stakeholders.
11. Serve as the point of contact for queries and issues related to the Security Function.
12. Collaborate with Service Delivery Managers and Service Owners to clarify expectations and remediation plans.
13. Work with the Security Production Assurance & Compliance Lead to implement security activities, processes, and standards.
14. Build stakeholder relationships, negotiate service levels, and define project scopes.
15. Monitor and ensure compliance with security policies, guidelines, and standards, escalating issues as necessary.
16. Propose policy and procedure improvements based on feedback to enhance efficiency and compliance.
17. Support incident and problem management teams in prioritizing security issues and participate in governance processes.
18. Manage security domain compliance using automation, digitization, security by design, and customer-focused approaches, and develop related strategies and roadmaps.

Knowledge/Skills

1. Ability to create insightful dashboards (preferably via PowerBI) by unifying reports from various sources.
2. Extensive experience in a similar infrastructure or technology management leadership role.
3. Understanding of change management processes in a fully managed IT environment (ITIL).
4. Excellent interpersonal, negotiation, and influencing skills across all organizational levels, including UK and Global.
5. Experience managing delivery teams and Managed IT services.
6. Proven ability to manage relationships with key stakeholders and third-party suppliers.
7. Capability to deliver transformation plans supporting operational goals.
8. Strong literacy, numeracy, and financial skills.
9. Excellent presentation skills.
10. Ability to set challenging objectives aligned with strategic priorities.
11. Commitment to continuous professional development (CPD) for maintaining professional status or accreditation.
12. Strong understanding of infrastructure management tooling such as Endpoint Protection, ITSM platforms, and security tools.
13. Knowledge of managing applications and infrastructure within Cloud environments.
14. Ability to adapt communication styles to explain technical concepts to diverse audiences.
15. Experience working in fast-paced, customer-oriented environments delivering high-quality security services.