The Role
You will be an Assistant Manager within the Cyber team helping to deliver high-quality advice to clients.
The business and technology landscapes are changing with our clients increasingly looking to new digital channels and innovative service delivery models for growth. This shift brings both opportunity, but also new and developing cyber threats. Our clients are also under regulatory scrutiny and are also continually battling to match a rapidly changing cyber threat landscape while harnessing the opportunities offered by digital services. As an Assistant Manager in our team, we expect you to understand the world of our clients, the complexities of modern technologies and the evolving cyber threat landscape, and to be able to translate complex cyber security issues into straightforward, credible, jargon-free advice to our clients; while making sure we can deliver the support they require.
As a technical cyber security Assistant Manager you should expect to be involved in a wide range of challenging engagements helping our clients improve their cybersecurity defense practices. You will be advising and supporting clients in various cyber defense domains including penetration testing, red/purple teaming, technical security configuration assessments, security monitoring and security operations, compromise assessments, threat intelligence and threat hunting, incident response, etc.
Responsibilities:
Management and delivery of challenging, complex client engagements to ensure quality and value to our clients by:
- Advising on technical aspects of cyber defense/response.
- Helping them optimize their approach to technical cyber defense controls.
- Manage projects from initiation to completion, ensuring adherence to timelines, budgets, and quality standards.
- Assisting with business development activities.
- Build and maintain strong relationships with clients, understanding their needs, and providing strategic solutions to meet their objectives.
- Deliver high-quality technical work related to cyber defense and response (technical security assessments, penetration testing, threat hunting, incident response, etc.).
- Review and improve the technical work that is being delivered.
- Supervise junior staff, providing guidance, training, and support to help them develop their skills and achieve project goals.
- Monitor project financials, prepare budgets, track expenses, and ensure profitability targets are met.
- Identify and mitigate project risks, ensuring compliance with regulatory requirements and company risk management policies.
- Support senior management in identifying new business opportunities.
- Prepare proposals and participate in client presentations.
- Ensure deliverables meet quality standards, review work papers, and provide feedback to team members to drive continuous improvement.
- Upholding KPMG’s values by acting with integrity.
Experience and Skills
Specific to the role, we expect that you will have:
- Proven experience in delivering one or more of the following areas: technical security assessments, penetration testing, red/purple teaming, security monitoring, and security operations, compromise assessments, threat intelligence, and threat hunting, incident response, etc. (essential).
- Track record showing understanding of the business, threat and regulatory issues faced by clients.
More generally, we expect that you will have:
- Proven ability to analyze problems, identify core issues and recommend appropriate technical solutions.
- Proven experience in successfully delivering complex cyber security services preferably in professional consultancy service provider, ensuring the delivery of high-quality work on time and to budget.
- Proven ability to work at sustained levels of high intensity, and inspire drive and resilience in others.
- Excellent communication skills (both written and oral), and project management skills.
- Ability to interact with organizations at different seniority levels.
- Strong networking skills and a broad professional network, both inside and outside of KPMG.
- Have played a key role in delivering technical cybersecurity engagements related to cyber defense and response.
Qualifications and Skills
- Bachelor’s or master's degree (preferably computer engineering or cyber security).
- English-speaking (and writing).
- Leader and team player.
- At least 5+ years of experience in a similar role.
- Recognized cyber security qualifications (e.g., CISSP, OSCP, GIAC, CEH, GPEN etc.), or comparable experience.
- Proactive and autonomous.
- Trained and proven skills with regard to security operating centers, security monitoring and analytics, security and penetration testing, ethical hacking (red and purple teaming), security architecture, DevSecOps, incident response, threat intelligence and threat hunting.
