About KPMG International
KPMG is a global organization of independent professional services firms providing Audit, Tax and Advisory services. KPMG is the brand under which the member firms of KPMG International Limited (“KPMG International”) operate and provide professional services. “KPMG” is used to refer to individual member firms within the KPMG organization or to one or more member firms collectively. KPMG firms operate in 145 countries and territories with more than 236,000 partners and employees working in member firms around the world. Each KPMG firm is a legally distinct and separate entity and describes itself as such. Each KPMG member firm is responsible for its own obligations and liabilities. KPMG International Limited is a private English company limited by guarantee. KPMG International Limited and its related entities do not provide services to clients. For more detail about our structure, please visit https://home.kpmg/xx/en/home/misc/governance.html.
More than 2,500 talented colleagues make up the KPMG International team, with a focus on ensuring global consistency and providing expertise to support member firms in the achievement of KPMG’s Trust and Growth ambition. KPMG International is comprised of a number of high-performing global teams, including: Global Advisory, Global Audit, Global Clients & Markets, Global Corporate Affairs, Global People, Global Quality and Risk Management, Global Tax & Legal, Global Technology and Knowledge, the International Office of General Counsel, and the Office of Chief Administrative Officer. Working together, the global team is changing the way business operates at KPMG, delivering value to KPMG firms and driving positive change in the communities in which KPMG International and KPMG firms operate.
About the team
ITS Global (Information Technology Services Global) is one of four pillars within KPMG’s Global Technology & Knowledge group. As such, ITS Global provides innovative components that KPMG’s business functions and member firms use to deliver client-facing solutions. ITS Global also provides the information protection and technology infrastructure that secures KPMG’s technology environment and connects its network of member firms. ITS Global works with the other GT&K pillars to provide KPMG technology solutions that leverage world-leading partnerships, disruptive digital capabilities and access to the firm’s collective intelligence.
Role Summary
The Head of Regional Security Delivery (RSD) should have strong leadership presence and the ability to coordinate highly complex information security activities among geographically dispersed teams. The Head of RSD is expected to have a background in information security across a range of security domains.
- Design and deliver reporting to senior KPMG international executive and regional board leadership.
Identify and define action plans aligned with Cyber Strategy to support the evolution of the regional agendas.
- Implement and support the execution against KPIs and KRIs to ensure delivery of key areas of focus.
- Develop and delivery of core forecasting and management of budget for department
- Act as a single point of contact for security matters related to RISOs (Regional Information Seurity Officers). This includes rolling up RISO concerns to GISG (Global Information Security Group) and the member firm Security Advisory groups.
- Provide direct oversight and action planning into the activities of the RISOs across all 3 regions.
- Identify key goals and performance metrics for RISOs to achieve global and regional goals.
- Align to RSD pillar activities to GISG strategy.
- Develop and maintain consistent member firm security profiling methodologies and reporting templates.
- Oversee the execution of member firm profiles by the RISOs.
- Roll up member firm profiling reporting and present to GISG leadership (to provide KPMG security posture).
- Provide oversight into remediation activities directed by RISOs pursuant to findings identified during member firm profiling.
- Coordinate with Second Line leadership to support RISOs with identification and remediation of security control related matters.
- Manage technical training requirements for RISOs.
- Guide RISOs in overseeing the security posture of all in-region member firms and undertake initiatives to promote security capability maturity uplift.
- Provide regional comparatives to the RISOs to maintain regional leveling at baseline.
Key Accountabilities
-
Manage the RISO Office operating and investment budgets.
-
Facilitate periodic meetings and drive team objectives with RISOs.
-
Roll up Member Firm profiling reporting and present to GISG leadership (to provide KPMG security posture).
-
Act as a single point of contact for security matters related to RISOs. This includes rolling up RISO concerns to GISG and the Security Customer Advisory Board.
-
Guide RISOs in overseeing the security posture of all in-region member firms and undertake initiatives to promote security capability maturity uplift.
Experience and knoweledge
- Implementation of large-scale international projects and the ability to manage multiple processes and projects at once while building constructive working relationships across the different teams, functions, cultures, genders and demonstrating KPMG behaviors and values.
- Working with senior partners within member firms as well as regional senior leaders and executive comittees to enable driving change
- Experience managing oversight of strategic business, vendor and team relationship management
- Ability to drive design and core areas on reporting with aggregations across different teams, locations and levels
- Demonstrate a combination of strategic understanding, both regionally and busienss experience
- Ability to influence and breakdown silos within and across the organization
- Experience working in a highly matrixed organization with teams located in multiple regions
- Superior analytical, evaluation, and problem solving abilities
Technical skills
- Bachelor's degree in Computer Science(s), Information Technology/Security, Systems Engineering or similar area; Master’s preferred
- Demonstrated experience working in a security environment on a global scale
- Demonstrated experience of leadership responsibilities, including strategy, budgeting and people leadership
- Demonstrated ability to lead and collaborate with a multi-discipline team; seek personal and technical feedback to further improve deliverables, improve service and develop teams.
- Ability to plan large projects and prepare executive level reporting including financial analysis; capable of strategic thinking and of moving strategic plans into action; familiar with information system security architectural documentation standards; able to apply information security standards, directives, guidance and policies to an architectural and risk-based framework.
- Strong written and oral communication skills for effective communication at all organizational levels.
*This role is offered on a 24-month fixed term contract basis*