Job description

KPMG is currently seeking a Lead Specialist, Cloud Security to join our Managed Services practice. Responsibilities: • Manage cloud security posture across AWS and Azure environments, governing the review, prioritization, remediation, and reporting of security risks, misconfigurations, and compliance issues; Support secure adoption of cloud and AI-enabled services by implementing security baselines, guardrails, policies, and risk assessments across cloud platforms. • Oversee cloud asset governance, including inventory accuracy, ownership accountability, lifecycle management, CMDB compliance, and visibility of unmanaged resources; Govern firewall security operations through Tufin and related platforms, ensuring policy compliance, risk reduction, audit readiness, and issue remediation. • Manage cloud and firewall security exception processes, including risk acceptance, compensating controls, renewals, reporting, and regulatory compliance; Serve as a key liaison between cybersecurity, engineering, infrastructure, application, and risk teams to drive security governance and measurable risk reduction. • Provides management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams. • Leads operational governance managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments. • Oversees change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives. • Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment. Qualifications: • Minimum five years of recent cybersecurity experience, including cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments • Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline • Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin • Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks • Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs • Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes • Ability to travel as needed • Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

Requirements

Must-haves

KPMG is currently seeking a Lead Specialist, Cloud Security to join our Managed Services practice.
Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.
Minimum five years of recent cybersecurity experience, including cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments
Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline
Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin
Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks
Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs
Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes
Ability to travel as needed

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazureai

Platform: avature
Effort: medium