Technical Security Consultant - Birmingham, United Kingdom - KPMG-UnitedKingdom

Tom O´Connor

Posted by:

Tom O´Connor

beBee Recruiter


Description

Job description

Team
This role is in the Security Architecture and Advisory (SAA) team, within the KPMG UK Information Security function.

The SAA team are critical in the assessment, development, and delivery of innovative, technology-enabled secure solutions for KPMG and our clients.

The SAA team is vital to KPMG's ability to demonstrate that we are delivering 'secure by design' solutions so that our business stakeholders, our clients, and our regulators trust KPMG.


Role


The role involves advising on technical security aspects of business products and security solutions that are considered, evaluated, or implemented by Enterprise wide and Connected Technology engineering teams.


The Technical Security Consultant will:

  • Lead as an internal consultant to an assigned Platform/Capability as part of our Centre of Excellence function providing technical security direction.
  • Lead on the design and innovation of security solutions covering areas such as network security, end point protection, DLP, SIEM, incident response, and IAM.
  • Collaborate with programmes and projects to help deliver solutions that meet the business need, including any client contractual security requirements, and are compliant with the Enterprise Security Architecture principles ensuring all applicable controls and patterns are implemented.
  • Work alongside internal Design Authorities and Change Management functions to ensure all change initiatives are reviewed, supported, and aligned with Enterprise Security Architecture.
  • Using threat modelling to provide risk or threatbased advice to programme stakeholders along with actionable recommendations where necessary.
  • Manage the scoping of security testing requirements for new systems and products working closely with our Security Testing function.
  • Provide support for risk assessment, security remediation, investigations, and vulnerability management as part of the wider Information Security team.
  • Support the creation and review of design and guidance documentation where required.
  • Support Enterprise Security Architecture by providing feedback from projects, including developing patterns and specifications in collaboration with Engineering teams.
  • Work towards and achieve or extend professional certifications as part of personal development (e.g. security or Cloud Vendor certifications).
  • Share experiences with others to assist their learning and understanding.

Prior experience

You must:

  • Have worked in at least one of:
  • An operational security role
  • Vulnerability management
  • Solution or infrastructure design
  • Hands on experience and knowledge in securing digital products/solutions in the Cloud (e.g. in AWS, Azure and Google).
  • Be able to demonstrate the ability to adapt communication style to explain technical concepts to different people within an organisation whether advising stakeholders, directing teams, or sharing experience.
  • Experience of successfully working in a fast paced, customer service/regulated environments, delivering high quality information security services.
  • Be calm in challenging situations, able to navigate through complex security problems to find the root cause and a balanced outcome.
It would be advantageous if you can demonstrate some, or all of:

  • Experience and knowledge of cloud-based security tooling (e.g. SIEM, End Point Protection)
  • Experience and knowledge of the mitre attack framework, micro segmentation, and zero trust
  • Any security certification.

More jobs from KPMG-UnitedKingdom