Senior Security Risk Analyst

Overview At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world. The Opportunity: The Senior Security Risk Analyst is responsible for executing detailed risk assessments and security solution reviews for KPMG technology projects. This is accomplished through adherence to all the key Security Risk Assessment phases. These include: Identification of the need for a Security Risk Assessment. Articulation of risk observation with respect to its likelihood and impact. Recommendation of practical risk mitigation. Work with business (vendor/firm project team) to develop and agree upon risk mitigation plan. Presentation of Security Risk Assessment findings and mitigation plan for management (Senior Manager and/or NITSO) approval. Update risk register on a weekly basis to ensure completeness & accuracy of open and or closed risks. The role requires providing consultative advice and guidance to the business during the technology project phase. The Senior Security Risk Analyst will interact frequently with the Project architects to ensure all relevant security measures have been embedded from project commencement. This role supports the Senior Manager in effectively delivering on a 1-2 year security strategy to protect KPMG information assets. What you will do Risk Assessment (Primary responsibility): Understand the firm’s security governance, policy/control framework and risk management approach. Review new technologies, changes to existing technologies, on-prem/cloud based products and services for risk. Actively participate in projects as the primary security resource providing guidance and input on architecture design, implementation and operational best practices. Propose risk mitigation strategies, review with stakeholders and maintain an agreed upon risk management plan. Track, manage and report on residual risks through the lifecycle. Recommend changes to and maintain the information risk management framework. Security Architecture (Secondary responsibility): Review Technical Solution Architectures. Advise Architecture team on recommended security protocols such as cryptography, public key infrastructure (PKI). Understand and advise on Firewall and Network device capabilities (Threat prevention, segregation, Layer 7 rules, SD-WAN, NAC). Audit & Compliance (Supporting responsibility): Conduct vendor audits/assessments. Respond to client questionnaires and client assessments. Review security terms and conditions of technology contracts. What you bring to the role 5-7 years in executing Security Risk Assessments, implementing security policy, technology, and security operations (Demonstrated hands on experience in managing security technology-based projects and in providing program management oversight and tracking against approved budgets). 2-3 years collaborative team experience required with technology and business staff along with leadership in a fast-paced and changing environment. High degree of knowledge and understanding of the security industry practices and standards, specifically familiarity with ISO 27001, NIST, CIS. Understanding of IT Risk management methodologies and developing key risk deliverables focusing on technology topics – including process flows, work programs, and risk reports. Experience with GRC and industry leading productivity tools to produce report, data flow diagrams & visual representations. Working experience with Cloud computing and services – including infrastructure, platforms, and software. Keys to your success KPMG individuals Deliver Impact | Seek Growth | Inspire Trust and understand that a diverse workforce enables us to deepen relationships and strengthen our business. Providing you with the support you need to be at your best For more information about KPMG in Canada’s Benefits and well-being, click here. This is a remote/hybrid position.
li-remote Our Values, The KPMG Way Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice. For more information about Inclusion, Diversity & Equity in Recruitment, please click here. For general recruitment-related inquiries, please contact the HR Delivery Centre at [email protected]. If you have a question about accessible employment at KPMG, or to begin a confidential conversation about your individual accessibility or accommodation needs through the recruitment process, we encourage you to contact us at [email protected] or phone: 416-777-8002 or toll free 1-888-466-4778.