Apply on Employer Site

KPMG US · 7 hours ago

Senior Associate, Cloud Security

New York, NY

Full-time

Hybrid

Mid, Senior Level

2+ years exp

KPMG is a leading advisory practice experiencing significant growth and client demand. They are looking for a Senior Associate in Cloud Security to validate systems, evaluate security measures, and prepare assessments to enhance information security and compliance.

Financial Services

No H1B

Responsibilities

Validate systems with specific emphasis on network operations and cyber tactics, techniques, as well as procedures focused on the threat to information networks; assess performance using evaluation criteria and technical performance measures

Evaluate the implementation of security mitigation techniques to protect the confidentiality, integrity, and availability of the organization's information, information systems, and Information Technology (IT) infrastructure and applications in accordance with Zero Trust architecture principles, policies, procedures, security techniques regulations

Prepare cyber and privacy assessments of current as well as planned projects based on research, and analysis

Evaluate the Information Security and Compliance related performance of companies, and develop plans for improvement as well as expense reduction

Help facilitate the integration of IT operations and organizations resulting from a roll-up and/or complete separation work from a parent organization

Evaluate and recommend improvements to the end-to-end systems, as well as systems-oriented processes through their entire life cycle

Qualification

Cloud SecurityInformation SecurityIT Security FrameworksCybersecurity RegulationsMicrosoft Security TechnologiesRelevant CertificationsTeam CollaborationAdaptability

Required

Minimum two years of recent experience in technology or security consulting firm or an IT security environment, serving as an IT Security Analyst (ITSA), Security Architect/Engineer, Cybersecurity technician, Cloud Security Specialist, Information Security Specialists or Data security Analyst

Bachelor's degree from an accredited college/university in an appropriate field

Solid understanding of information security, specific experience IT security frameworks, regulations and laws as it relates to ISO 27001, European Union General Data Protection Regulation (EU GDPR), California Consumer Privacy Act (CCPA), Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health (HITECH), National Institute of Standards and Technology (NIST), Cybersecurity Framework, Certified Information Systems Auditor (CISA) Zero Trust Maturity Model, Payment Card Industry Data Security Standard (PCI DSS), and Payment Application Data Security Standard (PCI PA-DSS)

Willingness and ability to travel; must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

Preferred

Relevant certifications such as International Information System Security Certification Consortium (ISC) two, Global Information Assurance Certification (GIAC), International Association of Privacy Professionals (IAPP), International Organization for Standardization (ISO), specific certifications such as Certified Information Systems Security Professional (CISSP), CISM, CISA, GIAC Security Essentials Certification (GSEC), HealthCare Information Security and Privacy Practitioner (HCISPP), PCI Professional or Qualified Security Assessor (QSA), Certified Information Privacy Professional/United States (CIPP/US), Certified Information Privacy Professional/Europe (CIPP/EU)

Solid understanding of leading practices in Cloud Security, focused on Google and Microsoft; certifications in Cloud Security architecture (for example SC-100, SC-500)

Experience in implementation and phase-wise roll out of Microsoft Security technologies like Entra, Intune, Defender, Sentinel and more