Overview:
In this role, you will lead cloud security governance and risk reduction initiatives within KPMG's Managed Services. You’ll oversee security posture across AWS and Azure, align baselines and guardrails, and coordinate across cybersecurity, engineering, and risk teams. The position emphasizes scalable cloud and firewall security, risk-based remediation, and collaboration with clients and global delivery teams. This is a hands-on leadership role shaping secure cloud and AI-enabled services at scale. Compensation / Benefits comprehensive compensation and benefits package medical and dental plans vision coverage 401(k) plans well-being benefits Personal Time Off
Responsibilities:
Guard cloud security posture across AWS and Azure, prioritizing and reporting risks and compliance gaps Implement security baselines, guardrails, and risk assessments for cloud and AI-enabled services Oversee cloud asset governance, including inventory accuracy, lifecycle, and CMDB visibility Govern firewall operations via Tufin and related platforms to ensure policy compliance and audit readiness Manage cloud security and firewall exception processes, including risk acceptance and renewals Act as liaison among cybersecurity, engineering, infrastructure, application, and risk teams to drive governance and risk reduction Coordinate Cyber Managed Services delivery across engagements with clients and stakeholders Lead operational governance of managed services, including incident, problem, and service requests Oversee change and release management, risk mitigation, and offshore/onshore delivery coordination Demonstrate integrity and professionalism to uphold respectful work environment
Key requirements:
Minimum five years of cybersecurity experience with cloud security and governance Bachelor's degree in related field Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin Experience supporting enterprise AWS and Azure environments with multi-account governance Experience in vulnerability management, compliance, exception governance, and risk-based remediation Proven ability to influence stakeholders and coordinate cross-functional remediation Ability to travel as needed Authorized to work in the U.S. without visa sponsorship now or in future stakeholder influence cross-functional collaboration clear communication AWS Azure IAM