Security Governance, Risk & Compliance Lead

Milwaukee Succeeds; Anchorage, Northern (AK, KY); Hybrid; USD 127,000 - 247,000; Full time

Job summary

KPMG LLP is seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization in the United States. The role leads technology, data, operations, cyber risk assessments, translating findings into risk-based decisions for leadership.

Qualifications include five years of risk and compliance experience in a large professional services environment, with preferred bachelor’s degree and certifications such as CIA, CISA, CISM, CRISC or CISSP.

Qualifications

• Five+ years in risk and compliance in a large professional services environment.
• Experience with physical and cyber security.
• Ability to translate technical data for non-technical audiences.
• Understanding of compliance frameworks and risk management principles.

Responsibilities

• Lead technology, data, operations, and cyber risk assessments; translate findings into actionable insights to enable leadership to make informed, risk-based decisions
• Demonstrate deep proficiency in data risk management within the LoD with focus on data modeling, strategy, governance and management controls
• Evaluate and recommend controls to mitigate risk and drive a risk-aware culture; ensure all recommendations align with firm policies and control standards to maintain risk within an acceptable appetite
• Analyze the impact of key risks and the evolving operating landscape; define criteria for risk tradeoffs and provide recommendations to leadership to optimize the organization's risk posture
• Develop and maintain comprehensive risk and control matrices (RCMs) and risk registers; manage the end-to-end risk lifecycle, including identification, evaluation, and treatment planning
• Build trust-based relationships with peers and senior leadership, collaborate with LoD partners to ensure internal audits and risk measures are accurately targeted toward high-impact areas
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Skills

Risk & compliance

Data risk management

Leadership

Analytical thinking

Communication

Certifications (CIA/CISA/CISM/CRISC/CI

Education

Bachelor's degree preferred

High school diploma or GED required

Tools

CIA

CISA

CISM

CRISC

CISSP

Job description

KPMG LLP is seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization in the United States. The role leads technology, data, operations, cyber risk assessments, translating findings into risk-based decisions for leadership.

Qualifications include five years of risk and compliance experience in a large professional services environment, with preferred bachelor’s degree and certifications such as CIA, CISA, CISM, CRISC or CISSP.