Cloud Security Lead — Enterprise Governance & Risk

KPMG Careers

Chicago (IL)

On-site

USD 114,000 - 268,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

KPMG LLP seeks a Lead Specialist, Cloud Security to join its Managed Services practice in California. You will oversee cloud security posture across AWS and Azure, govern risk, and drive secure adoption of cloud and AI-enabled services.

You will coordinate across cybersecurity, engineering, infrastructure, and risk teams, manage security governance, incident and change processes, and ensure delivery quality across engagements while upholding the firm's standards.

Qualifications

5+ years of cybersecurity experience in cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments.
Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin.
Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks.
Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs.
Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes.
Ability to travel as needed; authorized to work in the U.S. without the need for sponsorship now or in the future.

Responsibilities

Manage cloud security posture across AWS and Azure environments, governing the review, prioritization, remediation, and reporting of security risks, misconfigurations, and compliance issues; Support secure adoption of cloud and AI-enabled services by implementing security baselines, guardrails, policies, and risk assessments across cloud platforms.
Oversee cloud asset governance, including inventory accuracy, ownership accountability, lifecycle management, CMDB compliance, and visibility of unmanaged resources; Govern firewall security operations through Tufin and related platforms, ensuring policy compliance, risk reduction, audit readiness, and issue remediation.
Manage cloud and firewall security exception processes, including risk acceptance, compensating controls, renewals, reporting, and regulatory compliance; Serve as a key liaison between cybersecurity, engineering, infrastructure, application, and risk teams to drive security governance and measurable risk reduction.
Provides management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams.
Leads operational governance managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
Oversees change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.