Lead Specialist, Cloud Security

KPMG LLP; Orlando (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

KPMG is seeking a Lead Specialist, Cloud Security to join our Managed Services practice in Orlando, FL. The role focuses on governing cloud security posture, asset governance, and risk reduction across AWS and Azure, while coordinating with cybersecurity, engineering, and risk teams.

You will lead incident management, change and release coordination, and deliver secure adoption of cloud and AI-enabled services with policy baselines and guardrails.

Qualifications

• Minimum five years of recent cybersecurity experience with cloud security, governance, risk management, security operations, or cloud architecture.

Responsibilities

• Manage cloud security posture across AWS and Azure environments, implementing baselines, guardrails, and risk assessments.
• Oversee cloud asset governance and firewall security operations, including policy compliance and incident remediation.
• Coordinate cyber managed services delivery across engagements with clients and global delivery teams.
• Lead incident, problem, and service request management to meet SLA commitments.
• Oversee change and release management, risk, and offshore/onshore delivery coordination.

Skills

Cloud security

Governance

Risk management

Security operations

Cloud architecture

AWS

Azure

Education

Bachelor's degree in cybersecurity, information technology, computer science, engineering

Tools

AWS

Azure

IAM

Wiz

CSPM/CNAPP platforms

ServiceNow CMDB

Tufin

Job description

KPMG is currently seeking a Lead Specialist, Cloud Security to join our Managed Services practice.

Responsibilities

• Manage cloud security posture across AWS and Azure environments, governing the review, prioritization, remediation, and reporting of security risks, misconfigurations, and compliance issues; Support secure adoption of cloud and AI-enabled services by implementing security baselines, guardrails, policies, and risk assessments across cloud platforms.
• Oversee cloud asset governance, including inventory accuracy, ownership accountability, lifecycle management, CMDB compliance, and visibility of unmanaged resources; Govern firewall security operations through Tufin and related platforms, ensuring policy compliance, risk reduction, audit readiness, and issue remediation.
• Manage cloud and firewall security exception processes, including risk acceptance, compensating controls, renewals, reporting, and regulatory compliance; Serve as a key liaison between cybersecurity, engineering, infrastructure, application, and risk teams to drive security governance and measurable risk reduction.
• Provides management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams.
• Leads operational governance managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
• Oversees change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent cybersecurity experience, including cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline
• Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin
• Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks
• Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs
• Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes
• Ability to travel as needed
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)