Lead Specialist, Cloud Security

KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally.

Responsibilities

• Manage cloud security posture across AWS and Azure environments, governing the review, prioritization, remediation, and reporting of security risks, misconfigurations, and compliance issues.
• Support secure adoption of cloud and AI-enabled services by implementing security baselines, guardrails, policies, and risk assessments across cloud platforms.
• Oversee cloud asset governance, including inventory accuracy, ownership accountability, lifecycle management, CMDB compliance, and visibility of unmanaged resources.
• Govern firewall security operations through Tufin and related platforms, ensuring policy compliance, risk reduction, audit readiness, and issue remediation.
• Manage cloud and firewall security exception processes, including risk acceptance, compensating controls, renewals, reporting, and regulatory compliance.
• Serve as a key liaison between cybersecurity, engineering, infrastructure, application, and risk teams to drive security governance and measurable risk reduction.
• Provide management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams.
• Lead operational governance for managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
• Oversee change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Requirements

• Minimum five years of recent cybersecurity experience, including cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments.
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin.
• Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks.
• Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs.
• Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes.
• Ability to travel as needed.
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

Pay

California Salary Range: $114,095 - $268,180

Benefits

• Comprehensive medical and dental plans, vision coverage, disability and life insurance.
• 401(k) plans.
• Robust suite of personal well-being benefits to support mental health.
• Personal Time Off per fiscal year, based on job classification, standard work hours, and years of service.
• Two annual breaks where employees will not be required to use Personal Time Off: one at year-end and one around the July 4th holiday.