Manager, Third-Party Risk & Security Governance

KPMG LLP; Montvale (NJ); On-site; USD 120,000 - 170,000; Full time

Job summary

KPMG LLP is seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization in New Jersey. The role focuses on managing client security questionnaires, evidence gathering, and CSI artifacts, while collaborating with IT control owners and security teams.

Ideal candidates bring 5+ years of risk and compliance experience in a professional services setting, familiarity with NIST/ISO/GDPR, and relevant certifications (CISSP/CISA).

Qualifications

• Minimum five years of risk and compliance experience in a large professional services environment.
• Bachelor's degree preferred; minimum of a high school diploma or GED required; CISSP, CISA, or similar certification(s) preferred.
• Experience in security and interactions with and support of clients within a large IT organization, preferably within a professional services firm or in a similar environment.
• Familiarity with the AICPA Service Organizations Control reports and their purpose; awareness of Audit testing, evaluation of control evidence, identification of control deficiencies and remediation processes; familiarity with NIST, ISO, HIPAA, GDPR, and other IT, Privacy and Information Security Frameworks and laws.
• Strong problem solving, organizational and independent judgment skills to support customer service and teamwork.

Responsibilities

• Apply thorough understanding of security to complete client-provided security questionnaires accurately and timely while maintaining relationships with IT control owners.
• Maintain and contribute to the CSI Evidence Bank by gathering client-facing evidence from stakeholders inside and outside ESS and IT.
• Assist in the annual refresh process for CSI artifacts (SIG, whitepapers), incorporating feedback from multiple stakeholders.
• Help maintain the CSI workflow as documented through the ticket tracking system.
• Collaborate with security and technology teams on initiatives, projects and strategies.
• Assist the CSI team in preparing for client audits and assessments.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful work environment.

Skills

Risk & Compliance

Security governance

Client relations

Communication

Analytical thinking

Problem solving

Independent judgment

Education

Bachelor's degree

High School Diploma

CISSP

CISA

Job description

KPMG LLP is seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization in New Jersey. The role focuses on managing client security questionnaires, evidence gathering, and CSI artifacts, while collaborating with IT control owners and security teams.

Ideal candidates bring 5+ years of risk and compliance experience in a professional services setting, familiarity with NIST/ISO/GDPR, and relevant certifications (CISSP/CISA).