Manager, Third Party Risk Inquires

KPMG LLP; Montvale (NJ); On-site; USD 120,000 - 170,000; Full time

Job summary

KPMG LLP is seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization in New Jersey. The role focuses on managing client security questionnaires, evidence gathering, and CSI artifacts, while collaborating with IT control owners and security teams.

Ideal candidates bring 5+ years of risk and compliance experience in a professional services setting, familiarity with NIST/ISO/GDPR, and relevant certifications (CISSP/CISA).

Qualifications

• Minimum five years of risk and compliance experience in a large professional services environment.
• Bachelor's degree preferred; minimum of a high school diploma or GED required; CISSP, CISA, or similar certification(s) preferred.
• Experience in security and interactions with and support of clients within a large IT organization, preferably within a professional services firm or in a similar environment.
• Familiarity with the AICPA Service Organizations Control reports and their purpose; awareness of Audit testing, evaluation of control evidence, identification of control deficiencies and remediation processes; familiarity with NIST, ISO, HIPAA, GDPR, and other IT, Privacy and Information Security Frameworks and laws.
• Strong problem solving, organizational and independent judgment skills to support customer service and teamwork.

Responsibilities

• Apply thorough understanding of security to complete client-provided security questionnaires accurately and timely while maintaining relationships with IT control owners.
• Maintain and contribute to the CSI Evidence Bank by gathering client-facing evidence from stakeholders inside and outside ESS and IT.
• Assist in the annual refresh process for CSI artifacts (SIG, whitepapers), incorporating feedback from multiple stakeholders.
• Help maintain the CSI workflow as documented through the ticket tracking system.
• Collaborate with security and technology teams on initiatives, projects and strategies.
• Assist the CSI team in preparing for client audits and assessments.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful work environment.

Skills

Risk & Compliance

Security governance

Client relations

Communication

Analytical thinking

Problem solving

Independent judgment

Education

Bachelor's degree

High School Diploma

CISSP

CISA

Job description

KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization.

Responsibilities:

• Apply a thorough understanding of security to complete client-provided security questionnaires in an accurate, timely and consistent manner as well as establish and maintain effective business relationships with IT control owners throughout the firm
• Maintain and contribute to the Client Security Inquiry (CSI) Evidence Bank by gathering client-facing evidence in support of KPMG’s controls from a wide variety of stakeholders inside and outside of ESS and IT
• Assist in the annual refresh process for CSI artifacts (SIG, whitepapers), successfully incorporating feedback from multiple stakeholders
• Help maintain the CSI workflow as documented through the ticket tracking system
• Collaborate with security and technology teams on various initiatives, projects, and strategies
• Assist the CSI team in preparing for client audits and assessments
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful and courteous work environment

Qualifications:

• Minimum five years of recent risk and compliance experience within a large professional services environment specializing in physical and cyber security
• Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; CISSP, CISA, or similar certification(s) preferred
• Experience in security and interactions with and support of clients within a large IT organization, preferably within a professional services firm or in a similar environment
• Familiarity with the AICPA Service Organizations Control reports and their purpose; be aware of concepts in Audit testing, evaluation of control evidence, identification of control deficiencies and facilitating the remediation processes; familiarity with NIST, ISO, HIPAA, GDPR, and other IT, Privacy and Information Security Frameworks and laws
• Strong problem solving, organizational and independent judgment skills to support an environment driven by customer service and teamwork and ability to build successful and productive relationships with peers
• Exceptionally strong reading, verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)